Misc optimizations

modules/aliases.nix

@@ -10,6 +10,7 @@
     "nix:push" = "cd /etc/nixos && git add -A && git commit -m \"$(date -u +%s)\" && git push";
     "nix:pull" = "cd /etc/nixos && git pull";
     
+    "fixaudio" = "systemctl --user restart pipewire pipewire-pulse wireplumber";
     "nf" = "neofetch";
   };
 }

modules/audio.nix

@@ -9,6 +9,8 @@
     alsa.enable = true;
     alsa.support32Bit = true;
     pulse.enable = true;
+    jack.enable = true;
+    wireplumber.enable = true;
   };
 
   services.pipewire.extraConfig.pipewire."92-low-latency" = {

modules/boot.nix

@@ -15,4 +15,12 @@
 
   boot.tmp.useTmpfs = true;
   boot.tmp.tmpfsSize = "4G";
+
+  boot.kernel.sysctl = {
+    "net.ipv4.conf.all.log_martians" = 1;
+    "net.ipv4.conf.all.rp_filter" = 1;
+    "net.ipv4.conf.default.log_martians" = 1;
+    "net.ipv4.conf.default.rp_filter" = 1;
+    "net.ipv4.icmp_echo_ignore_broadcasts" = 1;
+  };
 }

modules/users.nix

@@ -11,4 +11,9 @@ in
     description = settings.userDescription;
     extraGroups = settings.userGroups;
   };
+
+  # Security
+  security.sudo.execWheelOnly = true;
+  security.audit.enable = true;
+  security.auditd.enable = true;
 }