50 lines
1.7 KiB
Nix
50 lines
1.7 KiB
Nix
{ config, lib, pkgs, inputs, ... }@attrs:
|
|
with lib; {
|
|
config = mkMerge [
|
|
(mkIf pkgs.stdenv.isLinux {
|
|
zramSwap = mkIf config.nathan.services.zramSwap {
|
|
enable = true;
|
|
algorithm = "lz4";
|
|
memoryPercent = 25;
|
|
};
|
|
nix = mkIf config.nathan.config.nix.autoGC { autoOptimiseStore = true; };
|
|
})
|
|
(mkIf config.nathan.config.harden
|
|
(import "${inputs.nixpkgs}/nixos/modules/profiles/hardened.nix" attrs))
|
|
(mkIf config.nathan.config.harden {
|
|
boot.kernelPackages = pkgs.linuxPackages_5_18_hardened;
|
|
security = {
|
|
allowSimultaneousMultithreading = true;
|
|
unprivilegedUsernsClone = true;
|
|
};
|
|
})
|
|
(mkIf ((!config.nathan.config.harden) && config.nathan.config.isDesktop) {
|
|
# Use the zen kernel with muqss turned on
|
|
boot.kernelPackages = let
|
|
linuxZenWMuQSS = pkgs.linuxPackagesFor
|
|
(pkgs.linuxPackages_zen.kernel.override {
|
|
structuredExtraConfig = with lib.kernel; { SCHED_MUQSS = yes; };
|
|
ignoreConfigErrors = true;
|
|
});
|
|
in linuxZenWMuQSS;
|
|
})
|
|
(mkIf (config.nathan.config.nix.autoUpdate && pkgs.stdenv.isLinux) {
|
|
# Auto update daily at 2 am
|
|
system.autoUpgrade = {
|
|
enable = true;
|
|
allowReboot = true;
|
|
# Update from the flake
|
|
flake = "git+https://git.sr.ht/~thatonelutenist/system-flake?ref=trunk";
|
|
# Attempt to update daily at 2AM
|
|
dates = "2:00";
|
|
};
|
|
})
|
|
# Systemd user service cludge
|
|
{
|
|
systemd.user.extraConfig = ''
|
|
DefaultEnvironment="PATH=/run/current-system/sw/bin:/etc/profiles/per-user/${config.nathan.config.user}/bin"
|
|
'';
|
|
}
|
|
];
|
|
}
|