nixos: add some sysctls to default-config