Modify like, basically everything idk, probably a lot of secrets and url names and colmena and whatnot

This commit is contained in:
Bun 2025-06-20 20:20:48 -04:00
parent 0ab856b18e
commit b3ba7481d8
107 changed files with 437 additions and 696 deletions

View file

@ -1,19 +1,16 @@
{ lib, pkgs, ... }:
{
imports = [
./grub
./lanzaboote
./limine
./plymouth
./services
./systemd
];
boot = {
kernelPackages = lib.mkDefault pkgs.linuxPackages_latest;
blacklistedKernelModules = [ "pcspkr" ];
kernel.sysctl = {
"vm.max_map_count" = 2147483642;
"kernel.sysrq" = 1;
};
kernel.sysctl."vm.max_map_count" = 2147483642;
kernelPackages = lib.mkDefault pkgs.linuxPackages_latest;
loader.systemd-boot.editor = false;
};
}

View file

@ -1,8 +0,0 @@
{ lib, ... }:
{
boot.loader.grub = {
enable = lib.mkDefault false;
efiSupport = true;
efiInstallAsRemovable = true;
};
}

View file

@ -1,7 +1,5 @@
{ config, pkgs, lanzaboote, ... }:
{ config, pkgs, ... }:
{
imports = [ lanzaboote.nixosModules.lanzaboote ];
boot.lanzaboote.pkiBundle = "/etc/secureboot";
environment = {

View file

@ -0,0 +1,8 @@
{ config, pkgs, name, ... }:
{
boot.loader.limine = {
biosSupport = !pkgs.stdenv.hostPlatform.isAarch64;
efiInstallAsRemovable = true;
efiSupport = true;
};
}

View file

@ -2,7 +2,6 @@
{
config.boot = lib.mkIf config.boot.plymouth.enable {
consoleLogLevel = 0;
loader.timeout = 0;
initrd.verbose = false;
kernelParams = [
"loglevel=3"

View file

@ -1,4 +1,4 @@
{ config, ... }:
{ config, name, ... }:
{
boot.initrd.systemd.services.root-reset = {
enable = config.environment.persistence."/persist".enable;
@ -10,7 +10,7 @@
serviceConfig.Type = "oneshot";
script = ''
mkdir -p /mnt
mount -t btrfs /dev/${config.networking.hostName}/root /mnt
mount -t btrfs /dev/${name}/root /mnt
if [[ -e /mnt/prev ]]; then
btrfs subvolume delete /mnt/prev

View file

@ -1,7 +0,0 @@
{ ... }:
{
boot.loader.systemd-boot = {
editor = false;
graceful = true;
};
}