unexplrd/nixos-blueprint
2
2
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

do the same for two other hosts

Browse Source 
Signed-off-by: unexplrd <unexplrd@linerds.us>
This commit is contained in:
unexplrd
2025-03-28 18:22:51 +02:00
parent b7f95a14c3
commit 2745bd1e35
20 changed files with 297 additions and 286 deletions
Download Patch File Download Diff File Expand all files Collapse all files

44
hosts/dunamis/hardware.nix
View File

@ -9,50 +9,6 @@
(modulesPath + "/installer/scan/not-detected.nix")
];
wireless.bluetooth.enable = true;
services.logind = {
lidSwitch = "ignore";
powerKey = "suspend";
};
boot = {
kernelModules = ["kvm-amd"];
extraModulePackages = [];
initrd = {
systemd.enable = true; # needed for auto-unlocking with TPM
availableKernelModules = ["xhci_pci" "ahci" "nvme" "usbhid" "usb_storage" "sd_mod"];
kernelModules = [
"i915"
];
};
};
boot.kernelParams = [
# "mitigations=auto"
# "spectre_v2=on"
# "spectre_v2_user=on"
# "spectre_bhi=on"
# "spec_store_bypass_disable=on"
# "tsx=off"
# "kvm.nx_huge_pages=force"
# "l1d_flush=on"
"amd_iommu=force_isolation"
"debugfs=off"
"efi=disable_early_pci_dma"
"gather_data_sampling=force"
# "ia32_emulation=0"
"intel_iommu=on"
"iommu.passthrough=0"
"iommu.strict=1"
"iommu=force"
"lockdown=confidentiality"
"module.sig_enforce=1"
"page_alloc.shuffle=1"
"reg_file_data_sampling=on"
"spec_rstack_overflow=safe-ret"
"vsyscall=none"
];
hardware.graphics = {
enable = true;
extraPackages = with pkgs; [