diff options
Diffstat (limited to 'hosts')
| -rw-r--r-- | hosts/common/security.nix | 5 | ||||
| -rw-r--r-- | hosts/glados/boot.nix | 7 | ||||
| -rw-r--r-- | hosts/glados/default.nix | 9 |
3 files changed, 16 insertions, 5 deletions
diff --git a/hosts/common/security.nix b/hosts/common/security.nix index a6c7e57..260538a 100644 --- a/hosts/common/security.nix +++ b/hosts/common/security.nix @@ -5,11 +5,6 @@ auditd.enable = !wsl; rtkit.enable = true; sudo = { - configFile = '' - Defaults env_reset - Defaults secure_path = /run/wrappers/bin:/nix/var/nix/profiles/default/bin:/run/current-system/sw/bin - Defaults editor = /run/current-system/sw/bin/vim,!env_editor - ''; execWheelOnly = true; extraRules = [ { diff --git a/hosts/glados/boot.nix b/hosts/glados/boot.nix index 6ff35ba..8e00b5a 100644 --- a/hosts/glados/boot.nix +++ b/hosts/glados/boot.nix @@ -16,6 +16,13 @@ in { boot = { kernelPackages = pinned-kernel.pkgs.linuxPackages_6_1; + kernel.sysctl = { + "vm.swappiness" = 100; + "vm.vfs_cache_pressure" = 500; + "vm.dirty_background_ratio" = 1; + "vm.dirty_ratio" = 50; + }; + bootspec.enable = true; loader.systemd-boot.enable = lib.mkForce false; diff --git a/hosts/glados/default.nix b/hosts/glados/default.nix index c1f9887..a6bc4ae 100644 --- a/hosts/glados/default.nix +++ b/hosts/glados/default.nix @@ -8,4 +8,13 @@ _: { ./network.nix ./services.nix ]; + + powerManagement.cpuFreqGovernor = "ondemand"; + + zramSwap = { + enable = true; + algorithm = "zstd"; + swapDevices = 1; + memoryPercent = 50; + }; } |