net.ipv4.conf.default.promote_secondaries = 1
net.ipv4.conf.all.promote_secondaries = 1
+# Fair Queue CoDel packet scheduler to fight bufferbloat
+net.core.default_qdisc = fq_codel
+
# Enable hard and soft link protection
fs.protected_hardlinks = 1
fs.protected_symlinks = 1