cyplo/dotfiles
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

hardened skinnyv

Browse source
This commit is contained in:
Cyryl Płotnicki 2021-02-28 14:26:18 +00:00
parent 2b0b9be428
commit 319e254f1c
2 changed files with 41 additions and 43 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

41
nixos/boxes/skinnyv/default.nix
View file

@ -15,35 +15,20 @@
../../git ../../git
]; ];
boot = { boot.kernelPackages = pkgs.linuxPackages_latest_hardened;
kernelPackages = pkgs.linuxPackages_latest; time.timeZone = "Europe/London";
initrd.luks.devices = {
root =
{
device = "/dev/disk/by-uuid/ef6e91d9-c477-4ab7-ae39-4a0ee413cebe";
preLVM = true;
allowDiscards = true;
};
};
loader.grub = {
device = "nodev";
efiSupport = true;
};
loader.efi.canTouchEfiVariables = true;
};
time.timeZone = "Europe/London";
fonts.fontconfig.enable = true; fonts.fontconfig.enable = true;
home-manager.users.cyryl = {...}: { home-manager.users.cyryl = {...}: {
imports = [ imports = [
../../home-manager ../../home-manager
]; ];
home.stateVersion = config.system.stateVersion; home.stateVersion = config.system.stateVersion;
nixpkgs.overlays = config.nixpkgs.overlays; nixpkgs.overlays = config.nixpkgs.overlays;
nixpkgs.config = config.nixpkgs.config; nixpkgs.config = config.nixpkgs.config;
home.file.".config/i3/status.toml".source = ../../../.config/i3/status-single-bat.toml; home.file.".config/i3/status.toml".source = ../../../.config/i3/status-single-bat.toml;
}; };
} }

43
nixos/boxes/skinnyv/hardware-configuration.nix
View file

@ -6,27 +6,40 @@
{ {
imports = imports =
[ <nixpkgs/nixos/modules/installer/scan/not-detected.nix> [ <nixpkgs/nixos/modules/installer/scan/not-detected.nix>
]; ];
boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "usb_storage" "sd_mod" ]; boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "usb_storage" "sd_mod" ];
boot.initrd.kernelModules = [ "dm-snapshot" ]; boot.initrd.kernelModules = [ "dm-snapshot" ];
boot.kernelModules = [ "kvm-intel" ]; boot.kernelModules = [ "kvm-intel" ];
boot.extraModulePackages = [ ]; boot.extraModulePackages = [ ];
boot.initrd.luks.devices = {
root =
{
device = "/dev/disk/by-uuid/ef6e91d9-c477-4ab7-ae39-4a0ee413cebe";
preLVM = true;
allowDiscards = true;
};
};
boot.loader.grub = {
device = "nodev";
efiSupport = true;
};
boot.loader.efi.canTouchEfiVariables = true;
fileSystems."/" = fileSystems."/" =
{ device = "/dev/disk/by-uuid/0c1df18e-df45-4290-8887-6529d00ccb9d"; { device = "/dev/disk/by-uuid/0c1df18e-df45-4290-8887-6529d00ccb9d";
fsType = "ext4"; fsType = "ext4";
}; };
fileSystems."/boot" = fileSystems."/boot" =
{ device = "/dev/disk/by-uuid/3246-8612"; { device = "/dev/disk/by-uuid/3246-8612";
fsType = "vfat"; fsType = "vfat";
}; };
swapDevices = swapDevices =
[ { device = "/dev/disk/by-uuid/e2b3e3b9-aa1f-47dc-8585-f8e035590c41"; } [ { device = "/dev/disk/by-uuid/e2b3e3b9-aa1f-47dc-8585-f8e035590c41"; }
]; ];
nix.maxJobs = lib.mkDefault 4; nix.maxJobs = lib.mkDefault 4;
powerManagement.cpuFreqGovernor = lib.mkDefault "powersave"; powerManagement.cpuFreqGovernor = lib.mkDefault "powersave";
} }