61 lines
1.4 KiB
Nix
61 lines
1.4 KiB
Nix
{ pkgs, lib, username, ... }:
|
|
|
|
{
|
|
imports = [ ./hardware-configuration.nix ./services.nix ];
|
|
|
|
networking.hostName = "laptop";
|
|
networking.networkmanager.enable = true;
|
|
|
|
networking.firewall.enable = true;
|
|
networking.firewall.allowedTCPPorts = [ ];
|
|
networking.firewall.allowedUDPPorts = [ 51820 ];
|
|
|
|
networking.wg-quick.interfaces = {
|
|
wg0 = {
|
|
address = [ "10.8.0.4/24" ];
|
|
dns = [ "10.0.10.20" "10.0.10.1" ];
|
|
privateKeyFile = "/root/wg-home.privkey";
|
|
|
|
peers = [
|
|
{
|
|
publicKey = "KRI5BtJHsU9RWvf1syJ8zWkKtH9RMg/R/v88j1IH6iE=";
|
|
presharedKeyFile = "/root/wg-preshared.key";
|
|
allowedIPs = [ "0.0.0.0/0" ];
|
|
endpoint = "vpn.dvdt.dev:51820";
|
|
persistentKeepalive = 25;
|
|
}
|
|
];
|
|
};
|
|
};
|
|
|
|
hardware.bluetooth.enable = true;
|
|
|
|
boot.loader = {
|
|
systemd-boot.enable = true;
|
|
efi = {
|
|
canTouchEfiVariables = true;
|
|
efiSysMountPoint = "/boot";
|
|
};
|
|
};
|
|
|
|
boot.initrd.secrets."/crypto_keyfile.bin" = null;
|
|
|
|
services.power-profiles-daemon.enable = false;
|
|
services.thermald.enable = true;
|
|
services.tlp = {
|
|
enable = true;
|
|
settings = {
|
|
CPU_SCALING_GOVERNOR_ON_AC = "performance";
|
|
CPU_SCALING_GOVERNOR_ON_BAT = "powersave";
|
|
|
|
CPU_ENERGY_PERF_POLICY_ON_AC = "performance";
|
|
CPU_ENERGY_PERF_POLICY_ON_BAT = "power";
|
|
|
|
CPU_MIN_PERF_ON_AC = 0;
|
|
CPU_MAX_PERF_ON_AC = 100;
|
|
CPU_MIN_PERF_ON_BAT = 0;
|
|
CPU_MAX_PERF_ON_BAT = 40;
|
|
};
|
|
};
|
|
}
|