nexoniarz/nexoniarz-config-nixos-laptop
Watch
1
0
Fork
You've already forked nexoniarz-config-nixos-laptop
 0
mirror of https://github.com/Nexoniarz/nexoniarz-config-nixos-laptop.git synced 2026-11-03 04:24:27 +00:00
Code Issues Projects Releases Packages Wiki Activity

Switch to the PC config layout: Plasma, Limine, shared configs/

Browse source 
Same modules and settings as nexoniarz-config-nixos; only hardware.nix
differs. Pantheon/LightDM -> Plasma 6/SDDM, systemd-boot -> Limine,
system.nix/drivers.nix split into focused modules, Firefox prefs and
fastfetch config in configs/.

Laptop hardware kept: AMD 680M + RTX 4050 PRIME offload (bus IDs
unchanged), NVIDIA suspend fix, asusd + supergfxd, tablet driver,
DualSense ERTM fix, laptop scripts (brightness, hotspot, telemetry,
weather). Dropped: GoPro v4l2loopback webcam, blueman.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
Nexoniarz 2026-10-02 21:07:55 +02:00
commit 863abb4fd3
21 changed files with 754 additions and 367 deletions
Download patch file Download diff file Expand all files Collapse all files

38
modules/security.nix Normal file
View file

@ -0,0 +1,38 @@
{ config, pkgs, ... }:
{
security.polkit.enable = true;
security.sudo.extraConfig = ''
Defaults pwfeedback
'';
programs.firejail.enable = true;
programs.gnupg.agent = {
enable = true;
enableSSHSupport = true;
pinentryPackage = pkgs.pinentry-rofi;
};
boot.kernel.sysctl = {
"kernel.kptr_restrict" = 2;
"kernel.dmesg_restrict" = 1;
"net.ipv4.conf.all.rp_filter" = 1;
"net.ipv4.conf.default.rp_filter" = 1;
"net.ipv4.conf.all.accept_redirects" = false;
"net.ipv4.conf.default.accept_redirects" = false;
"net.ipv6.conf.all.accept_redirects" = false;
"net.ipv6.conf.default.accept_redirects" = false;
"net.ipv4.conf.all.send_redirects" = false;
"net.ipv4.conf.default.send_redirects" = false;
# Only bites ad-hoc `gdb -p <pid>` on a non-child process.
"kernel.yama.ptrace_scope" = 1;
"net.ipv4.tcp_timestamps" = 0;
};
systemd.coredump.enable = false;
security.protectKernelImage = true;
services.geoclue2.enable = false;
}