[NixOS] Try to add a taint to ryzen-shine k3s

nixos/k3s.nix

@@ -16,6 +16,10 @@ in {
         type = lib.types.str;
         default = "";
       };
+      extraFlags = mkOption {
+        type = lib.types.listOf lib.types.str;
+        default = [];
+      };
     };
   };
   config = mkIf cfg.enable {
@@ -72,7 +76,7 @@ in {
         "--tls-san jimi-hendnix.local"
         "--tls-san dev.railbird.ai"
         "--node-label nixos-nvidia-cdi=enabled"
-      ];
+      ] ++ cfg.extraFlags;
       containerdConfigTemplate = ''
         {{ template "base" . }}
 

nixos/machines/ryzen-shine.nix

@@ -16,7 +16,10 @@
   };
   myModules.gitea-runner.enable = true;
   myModules.postgres.enable = true;
-  myModules.railbird-k3s.enable = true;
+  myModules.railbird-k3s = {
+    enable = true;
+    extraFlags = ["--node-taint preferNoSchedule=true:NoSchedule"];
+  };
 
   boot.loader.systemd-boot.configurationLimit = 5;