README.md: add GLF OS credits

and adapt various config elements from it

Signed-off-by: unexplrd <unexplrd@linerds.us>

README.md

@@ -12,5 +12,6 @@ Configurations I took code/ideas from:
 - [github:TheMaxMur/NixOS-Configuration](https://github.com/TheMaxMur/NixOS-Configuration)
 - [github:nix-community/srvos](https://github.com/nix-community/srvos)
 - [github:cloud-gouv/securix](https://github.com/cloud-gouv/securix)
+- [GLF OS](https://www.gaminglinux.fr/glf-os/en)
 
 Thx a lot <3

hosts/sarien/configuration.nix

@@ -1,5 +1,6 @@
 {
   inputs,
+  lib,
   pkgs,
   ...
 }: {
@@ -18,7 +19,6 @@
     hostName = "sarien";
   };
 
-  boot.loader.systemd-boot.enable = true;
   environment.memoryAllocator.provider = "mimalloc";
   system.stateVersion = "25.11";
   time.timeZone = "Europe/Kyiv";
@@ -29,7 +29,6 @@
     user = "user";
   };
 
-  zramSwap.enable = true;
   swapDevices = [
     {
       device = "/swap/swapfile";
@@ -39,7 +38,7 @@
     {
       device = "/swap/hibernate";
       size = 16 * 1024;
-      priority = 0;
+      priority = 1;
     }
   ];
 

modules/nixos/config/misc/default.nix

@@ -1,3 +1,3 @@
 {
-  imports = [./slim.nix];
+  imports = [./slim.nix ./zram.nix];
 }

modules/nixos/config/misc/zram.nix

@@ -0,0 +1,8 @@
+{
+  zramSwap = {
+    enable = true;
+    algorithm = "zstd";
+    memoryPercent = 25;
+    priority = 5;
+  };
+}

modules/nixos/config/nix/common.nix

@@ -7,7 +7,12 @@
     package = pkgs.lixPackageSets.latest.lix;
     channel.enable = false;
     daemonCPUSchedPolicy = "idle";
+    optimise = {
+      automatic = true;
+      dates = ["weekly"];
+    };
     settings = {
+      auto-optimise-store = true;
       experimental-features = [
         "nix-command"
         "flakes"

modules/nixos/config/security/default.nix

@@ -56,6 +56,7 @@ in {
     "fs.protected_regular" = 2;
     "fs.suid_dumpable" = 0;
     "kernel.kptr_restrict" = 2;
+    "kernel_kexec_load_disabled" = 1;
     # "kernel.modules_disabled" = 1;
     "kernel.sysrq" = 0;
     "kernel.unprivileged_bpf_disabled" = 1;

modules/nixos/config/services.nix

@@ -16,6 +16,10 @@
         bootstrap_resolvers = ["9.9.9.11:53" "9.9.9.9:53"];
       };
     };
+    fstrim = {
+      enable = true;
+      interval = "daily";
+    };
     opensnitch = {
       enable = false;
       settings = {