blob: 1d87654c217b8e07ee239a5f1e717a5acdf2a38f (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
|
{ config, lib, pkgs, modulesPath, ... }:
let
powerMode = "schedutil";
in
{
imports = [ ];
boot = {
initrd = {
availableKernelModules = [ "xhci_pci" "usb_storage" "sd_mod" "sdhci_acpi" "aesni_intel" "cryptd" ];
kernelModules = [ "i915" ];
};
kernelModules = [ "kvm_intel" ];
extraModulePackages = [ ];
kernelParams = [ "net.ifnames=0" "biosdevname=0" "iomem=relaxed" "mitigations=off" ];
};
fileSystems."/" = {
device = "none";
fsType = "tmpfs";
};
boot.initrd.luks.devices."encrypted_boot" = {
device = "/dev/disk/by-uuid/4f5ba100-5c69-49ce-b0cf-2f219a5e9e51";
preLVM = true;
};
fileSystems."/boot" = {
device = "/dev/mapper/encrypted_boot";
fsType = "vfat";
};
fileSystems."/boot/efi" = {
device = "/dev/disk/by-uuid/BD51-1431";
fsType = "vfat";
};
boot.initrd.luks.devices."encrypted_nix".device = "/dev/disk/by-uuid/596e43d3-ccda-4f06-bce9-58d6a8c0dd79";
fileSystems."/nix" = {
device = "/dev/mapper/encrypted_nix";
fsType = "btrfs";
neededForBoot = true;
options = [ "subvol=nix" "compress-force=zstd" "noatime" ];
};
boot.initrd.luks.devices."encrypted_home_and_persist".device = "/dev/disk/by-uuid/47a8ddde-1237-4a0f-84c4-f17fbd22ea3f";
fileSystems."/persist" = {
device = "/dev/mapper/encrypted_home_and_persist";
fsType = "btrfs";
neededForBoot = true;
options = [ "subvol=persist" "compress-force=zstd" "noatime" ];
};
fileSystems."/home" = {
device = "/dev/mapper/encrypted_home_and_persist";
fsType = "btrfs";
options = [ "subvol=home" "compress-force=zstd" ];
};
swapDevices = [ ];
powerManagement.cpuFreqGovernor = powerMode;
services = {
xserver = {
videoDrivers = [ "intel" ];
# Enable touchpad support (enabled default in most desktopManager).
synaptics = {
enable = true;
palmDetect = true;
twoFingerScroll = true;
minSpeed = "1.0";
maxSpeed = "1.12";
accelFactor = "0.01";
};
};
fstrim.enable = true;
tlp.enable = true;
};
hardware = {
opengl = {
enable = true;
driSupport = true;
extraPackages = with pkgs; [
intel-media-driver # LIBVA_DRIVER_NAME=iHD
vaapiIntel # LIBVA_DRIVER_NAME=i965 (older but works better for Firefox/Chromium)
vaapiVdpau
libvdpau-va-gl
];
};
};
services.btrfs.autoScrub.enable = true;
zramSwap.enable = true;
}
|
