echo reason for change

> Forces every new TCP socket to begin at a
> conservative MSS
> (min(path MTU, 1024 bytes) – 40).
> Immediately sends progressively larger probes
> and raises the MSS as soon as they’re ACKed.

This has been found to solve very slow deploys
with Tailscale, Kamal and our internal Docker
registry.

install/config/config.sh

@@ -29,8 +29,8 @@ sudo sed -i 's|^\(auth\s\+\[default=die\]\s\+pam_faillock.so\)\s\+authfail.*$|\1
 # Set Cloudflare as primary DNS (with Google as backup)
 sudo cp ~/.local/share/omarchy/default/systemd/resolved.conf /etc/systemd/
 
-# Solve common flakiness with SSH
-echo "net.ipv4.tcp_mtu_probing=1" | sudo tee -a /etc/sysctl.d/99-sysctl.conf
+# Solve common flakiness with SSH and Tailscale performance
+echo "net.ipv4.tcp_mtu_probing=2" | sudo tee -a /etc/sysctl.d/99-sysctl.conf
 
 # Set common git aliases
 git config --global alias.co checkout

migrations/1755244361.sh

@@ -0,0 +1,3 @@
+echo "Tuning MTU probing for more reliable SSH and Tailscale performance"
+
+sudo sed -i 's/^net.ipv4.tcp_mtu_probing=1/net.ipv4.tcp_mtu_probing=2/' /etc/sysctl.d/99-sysctl.conf