Commit graph

659 commits

Author SHA1 Message Date
9e6a0fc11d
[Desktop+Programs] move firefox configuration to programs.firefox
Convert all Gnome and Plasma specific configuration to use the new
programs.firefox.*
2024-04-05 12:42:19 +02:00
2bc54d0c0e
[Security/Hardening] fix mkQuasiForce 2024-04-04 15:33:06 +02:00
433565ff9c
[Programs/Bash] do not overwrite PROMPT_COMMAND if it is already set 2024-04-04 15:32:39 +02:00
8c2335f27c
[Boot] fix X32 abi config option name 2024-04-04 15:26:02 +02:00
d6340f65d1
[Boot] use zstd for module compression instead of xz
Faster and avoids using XZ in such a critical area.
2024-04-04 14:38:52 +02:00
e9d4ee4c44
[Desktop/General] apply systemd-suspend patch to rtkit-daemon
Fixes pipewire priority on resume
2024-04-04 14:37:30 +02:00
32021fa7e1
[Desktop/Browser] use vdhcoapp from milahu NUR repo
Maintainer just changed.
2024-04-04 14:36:35 +02:00
eb6d108b25
[Developer] add direnv hook to bash promptInit 2024-04-04 14:35:54 +02:00
5aec8315af
[Desktop/Plasma] don't actually force displayManager job, but almost 2024-03-13 00:22:13 +01:00
46943b419a
[Desktop/Developers] enable direnv 2024-03-13 00:19:00 +01:00
4881f5f486
[Security/Encryption] enable jitterentropy_rng kernel module
Does the same thing as haveged did in the past, but in the kernel.
I simply wonder why no one mentionned it is not enabled by default...
2024-03-12 23:38:36 +01:00
ec44bd467f
[Hardware/Nvidia] fix typo in extraModprobeconfig 2024-03-12 23:36:13 +01:00
ee8c0c75e6
[Desktop/Plasma] add service ordering/conflicts for sddm with getty 2024-03-11 22:26:49 +01:00
98e06464eb
[Hardening] ignore execve where auid is unset (services, typically) 2024-03-11 00:18:34 +01:00
470e333d00
[Gaming+Flake] add suyu flake and add back yuzu using suyu fork 2024-03-11 00:17:49 +01:00
48136970db
[Flake] add flake-utils to root flake 2024-03-11 00:16:11 +01:00
c548c42662
[Nix] always use latest nix + micro-optimize it 2024-03-11 00:06:57 +01:00
0729404d27
[Hardening] add many more sane audit rules 2024-03-08 23:28:04 +01:00
06398f02a6
[Hardening] prohibit root ssh login entirely in hardcore mode 2024-03-08 23:27:30 +01:00
3080d90d2c
[Hardening] use hardened kernel by default, but do not force it 2024-03-08 23:27:09 +01:00
07893642d7
[Hardening] use systemd-journald for audit logs 2024-03-08 23:26:32 +01:00
87ab357291
[Hardening] remove broken and obsolete dbus hardening 2024-03-08 23:15:46 +01:00
f3ccaff561
[Hardening] refactor overrides and make them more coherent
Especially, the priority was very wrong
2024-03-08 23:15:05 +01:00
a7067262de
[Boot+General] use ckbcomp generated keyMap by default 2024-03-08 23:10:51 +01:00
7eafff8f8a
[Overlays+Packages] add clion-fhs with a few helpful packages included
Easier "standard flow" development
2024-03-08 23:08:21 +01:00
09111b2825
[Lib/Optimizations] add autotools support 2024-03-08 23:01:38 +01:00
4a22e21f65
[Lib/Optimizations] debug optimizations being set + fix merging of options (!)
Previously, any attribute override occuring after a previous one would
overwrite it.
2024-03-08 23:01:12 +01:00
73b3014fb8
[General+Boot] fix console font not being set-up properly when using systemdStage1
Copy fonts from what is set-up at /etc/kbd/consolefonts to
/etc/kbd/consolefonts.
Note: since we use builtins.storePath, it won't work without the
--impure flag
2024-03-08 22:59:06 +01:00
bb08c18f92
[Boot] reduce boot verbosity from systemd (define sensible values based on boot.consoleLogLevel) 2024-03-08 22:55:22 +01:00
f32037933f
[Desktop/Plasma] remove redundant wayland.enable 2024-02-24 19:38:51 +01:00
4663e3e362
[Hardware/Nvidia/Opensource] silence warning by using types.str instead of types.string 2024-02-24 19:37:52 +01:00
c422181cfe
[Hardware/Nvidia] add missing requirements on nvidia-suspend
Hybrid Sleep still does not work properly...
2024-02-24 19:37:28 +01:00
2a0e0449fd
[Hardware/Nvidia] fix jellyfin black window by forcing it to use X11 2024-02-24 19:34:48 +01:00
e2d00c7616
[Hardware/Nvidia] enable nvidia framebuffer support 2024-02-20 00:54:04 +01:00
d14e1dd926
[Hardware/Nvidia] allow setting Nvidia registry Dword options
By default, enable PowerMizer and set sane defaults
2024-02-20 00:53:34 +01:00
b3f9af9be1
[Hardware/Nvidia] force GBM to use Nvidia 2024-02-20 00:52:24 +01:00
4ef337de7a
[Hardware/Nvidia] cleanup environment variables 2024-02-20 00:52:04 +01:00
2cad0340f1
[Hardware/Nvidia] help fix power management issues 2024-02-20 00:51:34 +01:00
1e5e4db41e
[Hardware/Nvidia] remove nvidia_uvm from early loading
Known to cause issues with power management
2024-02-20 00:50:16 +01:00
934b33eef5
[Desktop/General] Improve Wayland support 2024-02-20 00:44:57 +01:00
506bd4e1f0
[Desktop/General] better control early Systemd boot level + fix console setup
and don't disable console completely: this caused issues like not
setting up keyboard layout correctly, for instance.
2024-02-20 00:44:17 +01:00
05a54f03b5
[Desktop/Plasma] enable Wayland by default 2024-02-20 00:42:42 +01:00
c05b897b49
[Hardware/Nvidia] disable Wayland support by default if using proprietary driver 2024-02-14 01:51:32 +01:00
255ee5c1df
[Desktop/Plasma] use proper SDDM wayland enablement 2024-02-14 01:50:49 +01:00
58839c3394
[Lib/Optimizations] nicer traces 2024-02-07 20:47:22 +01:00
fd09456414
[Desktop/Multimedia] fix pipewire combined outputs 2024-02-07 20:46:59 +01:00
5d255ebcdc
[Hardware/Nvidia] allow using unstable bleeding edge version of Nvidia driver 2024-02-07 20:46:36 +01:00
77c6ad5b95
[Desktop/Flatpak] use native bind mount instead of fuse.bindfs for flatpak icons workaround 2024-02-07 20:44:55 +01:00
b37f09f519
[Network] add option to enable many types of VPN support to NetworkManager 2024-02-01 23:16:48 +01:00
0bc9e4cf9e
[Optimizations] don't recursively optimize by default 2024-02-01 23:16:13 +01:00