reidlab/nix-dotfiles
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

SONNNN

Browse source
This commit is contained in:
Reid 2026-04-02 01:07:12 -07:00
parent 3f3f770622
commit 98f3f2df9a
Signed by: reidlab
GPG key ID: DAF5EAF6665839FD
2 changed files with 72 additions and 69 deletions
Download patch file Download diff file Expand all files Collapse all files

2
default.nix
View file

@ -24,7 +24,7 @@ in {
boot = { boot = {
kernelPackages = mkDefault pkgs.linuxPackages_latest; kernelPackages = mkDefault pkgs.linuxPackages_latest;
kernelParams = [ "pci_aspm.policy=performance" ]; kernelParams = [ "pcie_aspm.policy=performance" ];
}; };
# configure keymap in x11 # configure keymap in x11

11
modules/security.nix
View file

@ -8,7 +8,8 @@ in {
useDoas = mkEnableOption "use opendoas instead of sudo"; useDoas = mkEnableOption "use opendoas instead of sudo";
}; };
config = mkIf cfg.enable { config = mkMerge [
{
boot = { boot = {
tmp.useTmpfs = lib.mkDefault true; tmp.useTmpfs = lib.mkDefault true;
tmp.cleanOnBoot = lib.mkDefault (!config.boot.tmp.useTmpfs); tmp.cleanOnBoot = lib.mkDefault (!config.boot.tmp.useTmpfs);
@ -45,7 +46,7 @@ in {
# TCP fastopen # TCP fastopen
"net.ipv4.tcp_fastopen" = 3; "net.ipv4.tcp_fastopen" = 3;
# bufferbloat mitigations + improvement in throughput and latency # bufferbloat mitigations + improvement in throughput and latency
"net.ipv4.tcp_conjestion_control" = "bbr"; "net.ipv4.tcp_congestion_control" = "bbr";
"net.core.default_qdisc" = "cake"; "net.core.default_qdisc" = "cake";
}; };
kernelModules = [ "tcp_bbr" ]; kernelModules = [ "tcp_bbr" ];
@ -78,12 +79,14 @@ in {
}; };
services.fwupd.enable = true; services.fwupd.enable = true;
} // (mkIf cfg.useDoas { }
(mkIf cfg.useDoas {
security.sudo.enable = false; security.sudo.enable = false;
security.doas.enable = true; security.doas.enable = true;
security.doas.extraRules = [ security.doas.extraRules = [
{ users = [ config.user.name ]; noPass = true; persist = false; keepEnv = true; } { users = [ config.user.name ]; noPass = true; persist = false; keepEnv = true; }
]; ];
environment.systemPackages = with pkgs; [ doas-sudo-shim ]; environment.systemPackages = with pkgs; [ doas-sudo-shim ];
}); })
];
} }