push

core/boot.nix

@@ -9,7 +9,12 @@
     #services.journald.extraConfig = "Storage=volatile";
 
     boot = {
-        kernelParams = [ "fsck.mode=skip" ]; 
+        #kernel.sysctl = {
+        #    "vm.max_map_count" = 16777216;
+        #    "fs.file-max" = 524288;
+        #};
+        
+        kernelParams = [ "fsck.mode=skip" "nvidia_drm.fbdev=1" "nvidia-drm.modeset=1" ]; 
 
         initrd.checkJournalingFS = false;
 

core/core.nix

@@ -11,5 +11,6 @@
         ./network.nix
         ./boot.nix
         ./security.nix
+        # ./swap.nix
     ];
 }

core/graphics.nix

@@ -1,4 +1,4 @@
-{ config, ... }:
+{ config, pkgs, ... }:
 
 {
     services.xserver.videoDrivers = ["nvidia"];
@@ -12,9 +12,9 @@
             modesetting.enable = true;
             powerManagement.enable = false;
             powerManagement.finegrained = false;
-            open = false;
+            open = true;
             nvidiaSettings = true;
-            package = config.boot.kernelPackages.nvidiaPackages.beta;
+            package = config.boot.kernelPackages.nvidiaPackages.stable;
         };
     };
 }

core/network.nix

@@ -3,6 +3,29 @@
 {
     services.openssh.enable = true;
     
+    networking.firewall.enable = true;
+    
+    networking.nameservers = [ "8.8.8.8" "8.8.4.4" ];
+
+    services.dnscrypt-proxy2 = {
+        enable = true;
+        
+        settings = {
+            ipv6_servers = true;
+            require_dnssec = true;
+            
+            sources.public-resolvers = {
+                urls = [
+                    "https://raw.githubusercontent.com/DNSCrypt/dnscrypt-resolvers/master/v3/public-resolvers.md"
+                    "https://download.dnscrypt.info/resolvers-list/v3/public-resolvers.md"
+                ];
+                
+                cache_file = "/var/cache/dnscrypt-proxy/public-resolvers.md";
+                minisign_key = "RWQf6LRCGA9i53mlYecO4IzT51TGPpvWucNSCh1CBM0QTaLn73Y7GFO3";
+            };
+        };
+    };
+    
     networking = {
         hostName = "nix";
         useNetworkd = true;

core/swap.nix

@@ -0,0 +1,15 @@
+{ ... }:
+
+{
+    swapDevices = [
+        {
+            device = "/var/lib/swapfile";
+            size = 16 * 1024;
+        }
+    ];
+
+    zramSwap = {
+        enable    = true;
+        memoryMax = 64 * 1024 * 1024 * 1024;
+    };
+}

core/user.nix

@@ -4,6 +4,6 @@
     users.users.bug = {
         isNormalUser = true;
         description = "Bug";
-        extraGroups = [ "networkmanager" "wheel" ];
+        extraGroups = [ "networkmanager" "wheel" "audio" "video" "docker" ];
     };
 }