Add back the PineBook for later and make etc immutable

modules/system/devices/boot/default.nix

@@ -1,7 +1,6 @@
 { ... }:
 {
   imports = [
-    ./extlinux
     ./lanzaboote
     ./systemd
   ];

modules/system/devices/boot/extlinux/default.nix

@@ -1,18 +0,0 @@
-{ lib, config, ... }:
-{
-  options.system.extlinux = {
-    enable = lib.mkOption {
-      type = lib.types.bool;
-      default = false;
-      description = "Enable Lanzaboote and force disable Systemd-boot";
-    };
-  };
-
-  config = lib.mkIf config.system.extlinux.enable {
-    boot.loader = {
-      generic-extlinux-compatible.enable = true;
-      systemd-boot.enable = lib.mkForce false;
-      grub.enable = lib.mkForce false;
-    };
-  };
-}

modules/system/devices/disks/default.nix

@@ -3,6 +3,7 @@
   imports = [
     ./btrfs
     ./filesystems
+    ./immutable
     ./impermanence
     ./snapper
   ];

modules/system/devices/disks/immutable/default.nix

@@ -0,0 +1,4 @@
+{ ... }:
+{
+  system.etc.overlay.mutable = false;
+}

modules/system/services/general/default.nix

@@ -10,5 +10,6 @@
     ./ssh
     ./sunshine
     ./tlp
+    ./userborn
   ];
 }

modules/system/services/general/keyd/default.nix

@@ -33,7 +33,7 @@
           "9" = "f9";
           "0" = "f10";
           "-" = "f11";
-          "=" = "f12";
+          #"=" = "f12";
         };
       };
     };

modules/system/services/general/userborn/default.nix

@@ -0,0 +1,5 @@
+{ ... }:
+{
+  # Enable this when 24.11 drops
+  #services.userborn.enable = true;
+}

modules/system/settings/default.nix

@@ -3,6 +3,7 @@
   imports = [
     ./documentation
     ./fonts
+    ./minimal
     ./nix
   ];
 }

modules/system/settings/documentation/default.nix

@@ -1,7 +1,10 @@
 { ... }:
 {
   documentation = {
-    nixos.enable = false;
+    doc.enable = false;
     info.enable = false;
+    nixos.enable = false;
   };
+
+  programs.command-not-found.enable = true;
 }

modules/system/settings/minimal/default.nix

@@ -0,0 +1,10 @@
+{ ... }:
+{
+  environment = {
+    defaultPackages = [ ];
+    stub-ld.enable = false;
+  };
+
+  programs.less.lessopen = null;
+  services.logrotate.enable = false;
+}