My nixos configuration used for setting up my laptop & desktop
- nixos configuration using nix flakes to ensure reproducability
- using disko for declarative disk partitioning and formatting using nix
- full disk encryption on top of btrfs (with encrypted swap)
- opt-in impermenance following Graham's amazing blog post: Erase your darlings (backed by btrfs instead of zfs)
- secure-boot using lanzaboote
- TPM-backed full disk encryption on boot using
systemd-cryptenroll
-
setup home-manager to work with impermenance (as nix module) and standalone for on-the-fly user setup
-
add yubikey module with age encryption
-
add secrets management using age keys saved in yubikey
-
laptop setup:
- fingerprint reader
- light sensor
- custom battery charging threshold in linux (inspired by MSI dragon center)
- fix audio muted on boot
- fix wi-fi not working after suspend
- bluetooth
-
desktop setup:
- TBD