README.md: add GLF OS credits

and adapt various config elements from it

Signed-off-by: unexplrd <unexplrd@linerds.us>

modules/nixos/config/misc/default.nix

@@ -1,3 +1,3 @@
 {
-  imports = [./slim.nix];
+  imports = [./slim.nix ./zram.nix];
 }

modules/nixos/config/misc/zram.nix

@@ -0,0 +1,8 @@
+{
+  zramSwap = {
+    enable = true;
+    algorithm = "zstd";
+    memoryPercent = 25;
+    priority = 5;
+  };
+}

modules/nixos/config/nix/common.nix

@@ -7,7 +7,12 @@
     package = pkgs.lixPackageSets.latest.lix;
     channel.enable = false;
     daemonCPUSchedPolicy = "idle";
+    optimise = {
+      automatic = true;
+      dates = ["weekly"];
+    };
     settings = {
+      auto-optimise-store = true;
       experimental-features = [
         "nix-command"
         "flakes"

modules/nixos/config/security/default.nix

@@ -56,6 +56,7 @@ in {
     "fs.protected_regular" = 2;
     "fs.suid_dumpable" = 0;
     "kernel.kptr_restrict" = 2;
+    "kernel_kexec_load_disabled" = 1;
     # "kernel.modules_disabled" = 1;
     "kernel.sysrq" = 0;
     "kernel.unprivileged_bpf_disabled" = 1;

modules/nixos/config/services.nix

@@ -16,6 +16,10 @@
         bootstrap_resolvers = ["9.9.9.11:53" "9.9.9.9:53"];
       };
     };
+    fstrim = {
+      enable = true;
+      interval = "daily";
+    };
     opensnitch = {
       enable = false;
       settings = {