etc/nix/configuration.nix: various improvements

1 files changed, 67 insertions, 7 deletions

diff --git a/etc/nix/configuration.nix b/etc/nix/configuration.nix
index 38e0862..891142b 100644
--- a/etc/nix/configuration.nix
+++ b/etc/nix/configuration.nix
@@ -10,6 +10,11 @@
 
   # Use the systemd-boot EFI boot loader.
   boot = {
+    tmp = {
+      cleanOnBoot = true;
+      useTmpfs = true;
+    };
+
     loader = {
       efi.canTouchEfiVariables = true;
       grub = {
@@ -18,12 +23,26 @@
         device = "nodev";
       };
     };
-    initrd.luks.devices = {
-      crypted = {
-        device = "/dev/nvme0n1p2";
-        preLVM = true;
+
+    initrd = {
+      availableKernelModules = [
+        "xhci_pci"
+        "ahci"
+        "usb_storage"
+        "nvme"
+        "rtsx_usb_sdmmc"
+        "uas"
+        "sd_mod"
+      ];
+      luks.devices = {
+        crypted = {
+          device = "/dev/nvme0n1p2";
+          preLVM = true;
+        };
       };
     };
+
+    kernelModules = [ "kvm-intel" ];
   };
 
   hardware = {
@@ -34,6 +53,25 @@
         load-module module-echo-cancel
       '';
     };
+
+    opengl = {
+      enable = true;
+      driSupport = true;
+      driSupport32Bit = true;
+      extraPackages = with pkgs; [
+        intel-media-driver
+        libvdpau-va-gl
+        vaapiIntel
+        vaapiVdpau
+      ];
+    };
+
+    # nvidia = { };
+  };
+
+  security.pam.services = {
+    login.fprintAuth = true;
+    xscreensaver.fprintAuth = true;
   };
 
   networking = {
@@ -86,6 +124,11 @@
     config = {
       android_sdk.accept_license = true;
       allowUnfree = true;
+      packageOverrids = pkgs: {
+        vaapiIntel = pkgs.vaapiIntel.override {
+          enableHybridCodec = true;
+        };
+      };
     };
     overlays = [
       (import (fetchTarball {
@@ -93,6 +136,7 @@
           "https://euandre.org/git/package-repository/snapshot/package-repository-main.tar.xz";
       }) { inherit pkgs; })
     ];
+
   };
 
   documentation.man = {
@@ -102,14 +146,28 @@
 
   services = {
     upower.enable = true;
-    fprintd.enable = true;
     blueman.enable = true;
     pcscd.enable = true;
     udisks2.enable = true;
     globalprotect.enable = true;
     redshift.enable = true;
-    geoclue2.enable = true;
-    geoclue2.appConfig.redshift.isAllowed = true;
+    acpid.enable = true;
+    fstrim.enable = true;
+
+    fprintd = {
+      enable = true;
+      tod = {
+        enable = true;
+        driver = pkgs.libfprint-2-tod1-goodix;
+      };
+    };
+
+    geoclue2 = {
+      enable = true;
+      appConfig.redshift.isAllowed = true;
+    };
+
+    logind.lidSwitch = "lock";
 
     postfix = {
       enable = true;
@@ -214,6 +272,8 @@
       enable = true;
       layout = "br";
       xkbOptions = "caps:swapescape";
+      videoDrivers = [ "intel" ];
+
 
       # Touchpad support
       libinput.enable = true;