atridad/lavitz
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Some logical re-grouping

Browse Source
This commit is contained in:
Atridad Lahiji
2025-12-20 23:49:56 -07:00
parent 5e27cd814f
commit a7674f6c1d
3 changed files with 16 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
configuration.nix
View File

@@ -18,5 +18,8 @@
./modules/aliases.nix ./modules/aliases.nix
]; ];
nix.settings.experimental-features = [ "nix-command" "flakes" ];
xdg.portal.config.common.default = [ "gnome" ];
system.stateVersion = "25.11"; system.stateVersion = "25.11";
} }

20
modules/boot.nix
View File

@@ -6,27 +6,13 @@
editor = false; editor = false;
configurationLimit = 10; configurationLimit = 10;
}; };
boot.loader.efi.canTouchEfiVariables = true; boot.loader.efi.canTouchEfiVariables = true;
boot.kernelPackages = pkgs.linuxPackages_latest;
boot.initrd.kernelModules = [ "amdgpu" ];
boot.kernelParams = [
"preempt=full"
"slab_nomerge"
"init_on_alloc=1"
"init_on_free=1"
"page_alloc.shuffle=1"
"randomize_kstack_offset=on"
"vsyscall=none"
"mitigations=auto"
];
boot.kernelPackages = pkgs.linuxPackages_latest;
boot.kernelModules = [ "tcp_bbr" ]; boot.kernelModules = [ "tcp_bbr" ];
boot.initrd.kernelModules = [ "amdgpu" ];
boot.kernelParams = [ "preempt=full" ];
boot.tmp.useTmpfs = true; boot.tmp.useTmpfs = true;
boot.tmp.tmpfsSize = "4G"; boot.tmp.tmpfsSize = "4G";
nix.settings.experimental-features = [ "nix-command" "flakes" ];
xdg.portal.config.common.default = [ "gnome" ];
} }

10
modules/security.nix
View File

@@ -35,6 +35,16 @@
{ domain = "*"; type = "hard"; item = "core"; value = "0"; } { domain = "*"; type = "hard"; item = "core"; value = "0"; }
]; ];
boot.kernelParams = [
"slab_nomerge"
"init_on_alloc=1"
"init_on_free=1"
"page_alloc.shuffle=1"
"randomize_kstack_offset=on"
"vsyscall=none"
"mitigations=auto"
];
boot.kernel.sysctl = { boot.kernel.sysctl = {
"kernel.dmesg_restrict" = 1; "kernel.dmesg_restrict" = 1;
"kernel.kptr_restrict" = 2; "kernel.kptr_restrict" = 2;