Some logical re-grouping

configuration.nix

@@ -18,5 +18,8 @@
     ./modules/aliases.nix
   ];
 
+  nix.settings.experimental-features = [ "nix-command" "flakes" ];
+  xdg.portal.config.common.default = [ "gnome" ];
+
   system.stateVersion = "25.11";
 }

modules/boot.nix

@@ -6,27 +6,13 @@
     editor = false;
     configurationLimit = 10;
   };
-
   boot.loader.efi.canTouchEfiVariables = true;
+
   boot.kernelPackages = pkgs.linuxPackages_latest;
-  boot.initrd.kernelModules = [ "amdgpu" ];
-  
-  boot.kernelParams = [
-    "preempt=full"
-    "slab_nomerge"
-    "init_on_alloc=1"
-    "init_on_free=1"
-    "page_alloc.shuffle=1"
-    "randomize_kstack_offset=on"
-    "vsyscall=none"
-    "mitigations=auto"
-  ];
-
   boot.kernelModules = [ "tcp_bbr" ];
+  boot.initrd.kernelModules = [ "amdgpu" ];
+  boot.kernelParams = [ "preempt=full" ];
 
   boot.tmp.useTmpfs = true;
   boot.tmp.tmpfsSize = "4G";
-
-  nix.settings.experimental-features = [ "nix-command" "flakes" ];
-  xdg.portal.config.common.default = [ "gnome" ];
 }

modules/security.nix

@@ -35,6 +35,16 @@
     { domain = "*"; type = "hard"; item = "core"; value = "0"; }
   ];
 
+  boot.kernelParams = [
+    "slab_nomerge"
+    "init_on_alloc=1"
+    "init_on_free=1"
+    "page_alloc.shuffle=1"
+    "randomize_kstack_offset=on"
+    "vsyscall=none"
+    "mitigations=auto"
+  ];
+
   boot.kernel.sysctl = {
     "kernel.dmesg_restrict" = 1;
     "kernel.kptr_restrict" = 2;