71 lines
1.4 KiB
Nix
71 lines
1.4 KiB
Nix
{ config, pkgs, ... }:
|
|
|
|
{
|
|
imports = [
|
|
./hardware-configuration.nix
|
|
./disko.nix
|
|
|
|
# Modules
|
|
../../modules/core
|
|
../../modules/development
|
|
../../modules/networking
|
|
../../modules/virtualization
|
|
|
|
## Desktop Environment
|
|
../../desktops/hyprland
|
|
];
|
|
|
|
boot = {
|
|
zfs.forceImportRoot = false;
|
|
supportedFilesystems = [ "zfs" ];
|
|
|
|
initrd = {
|
|
luks.devices."cryptroot" = {
|
|
device = "/dev/disk/by-partlabel/luks";
|
|
allowDiscards = true;
|
|
};
|
|
|
|
availableKernelModules = [
|
|
"tpm_tis"
|
|
"tpm_crb"
|
|
];
|
|
};
|
|
|
|
loader = {
|
|
efi = {
|
|
canTouchEfiVariables = true;
|
|
efiSysMountPoint = "/boot"; # Adjust if your EFI partition is mounted elsewhere (e.g., /boot/efi)
|
|
};
|
|
grub = {
|
|
enable = true;
|
|
device = "nodev"; # "nodev" is required for EFI installs
|
|
efiSupport = true;
|
|
useOSProber = true; # Set to true if you are dual-booting with Windows/other distros
|
|
};
|
|
};
|
|
|
|
kernelModules = [
|
|
"tpm_tis"
|
|
"tpm_crb"
|
|
];
|
|
};
|
|
|
|
security = {
|
|
tpm2.enable = true;
|
|
sudo.wheelNeedsPassword = false;
|
|
};
|
|
|
|
services.zfs.autoScrub.enable = true;
|
|
services.zfs.autoSnapshot.enable = true;
|
|
|
|
networking.hostId = "8425e349";
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
tpm2-tools
|
|
brave
|
|
fprintd # Fingerprint
|
|
];
|
|
|
|
system.stateVersion = "26.05";
|
|
}
|