helm/hosts/shiro/hardware-configuration.nix
Henrik Lissner 3f72e498d6 hosts/{kuro,shiro}: harden storage/backup mounts
Removing unneeded privileges from backup mounts.

Also adds noatime to nfs mounts for slight improvement in throughput.
2021-02-20 18:53:49 -05:00

80 lines
2.2 KiB
Nix
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

# Do not modify this file! It was generated by nixos-generate-config
# and may be overwritten by future invocations. Please make changes
# to /etc/nixos/configuration.nix instead.
{ config, lib, pkgs, inputs, modulesPath, ... }:
{
imports = [
(modulesPath + "/installer/scan/not-detected.nix")
inputs.nixos-hardware.nixosModules.dell-xps-13-9370
];
boot = {
initrd.availableKernelModules = [ "xhci_pci" "nvme" "rtsx_pci_sdmmc" ];
initrd.kernelModules = [ "dm-snapshot" ];
kernelModules = [ "kvm-intel" ];
extraModulePackages = [ ];
# HACK Disables fixes for spectre, meltdown, L1TF and a number of CPU
# vulnerabilities. This is not a good idea for mission critical or
# server/headless builds, but Kuro isn't either. I'll prioritize raw
# performance over security here, though the gains are minor.
kernelParams = [ "mitigations=off" ];
};
# Modules
modules.hardware = {
audio.enable = true;
fs = {
enable = true;
ssd.enable = true;
};
};
# CPU
nix.maxJobs = lib.mkDefault 8;
hardware.cpu.intel.updateMicrocode = true;
# performance gives better battery life/perf than ondemand on sandy bridge and
# newer because of intel pstates.
powerManagement.cpuFreqGovernor = "performance";
# Power management
environment.systemPackages = [ pkgs.acpi ];
powerManagement.powertop.enable = true;
# Monitor backlight control
programs.light.enable = true;
user.extraGroups = [ "video" ];
# Storage
fileSystems = {
"/" = {
device = "/dev/disk/by-label/nixos";
fsType = "ext4";
options = [ "noatime" ];
};
"/boot" = {
device = "/dev/disk/by-label/BOOT";
fsType = "vfat";
};
"/home" = {
device = "/dev/disk/by-label/home";
fsType = "ext4";
options = [ "noatime" ];
};
"/usr/drive" = {
device = "kiiro:/volume1/homes/hlissner/Drive";
fsType = "nfs";
options = [
"nofail" "noauto" "noatime" "x-systemd.automount"
"nodev" "nosuid" "noexec"
];
};
};
swapDevices = [ { device = "/dev/disk/by-label/swap"; }];
boot.initrd.luks.devices.home = {
device = "/dev/nvme0n1p8";
preLVM = true;
allowDiscards = true;
};
}