nixos-config/hosts/steamdeck/hardware-configuration.nix

#
# Hardware settings for Teclast F5 10" Laptop
# NixOS @ sda2
#
# flake.nix
#  └─ ./hosts
#      └─ ./laptop
#          └─ hardware-configuration.nix *
#
# Do not modify this file!  It was generated by ‘nixos-generate-config’
# and may be overwritten by future invocations.  Please make changes
# to /etc/nixos/configuration.nix instead.
{
  config,
  lib,
  pkgs,
  modulesPath,
  ...
}: {
  imports = [
    (modulesPath + "/installer/scan/not-detected.nix")
  ];

  boot = {
    initrd = {
      availableKernelModules = ["nvme" "xhci_pci" "usb_storage" "usbhid" "sd_mod" "sdhci_pci"];
      kernelModules = [];
      systemd.enable = true;
      luks = {
        devices."crypted" = {
          device = "/dev/disk/by-partlabel/disk-nvme0n1-luks";
          allowDiscards = true;
          bypassWorkqueues = true;
        };
      };
    };

    kernelModules = ["kvm-amd" "amdgpu"];
    kernelParams = ["luks.options=fido2-device=auto"];
    tmp.useTmpfs = false;
    tmp.cleanOnBoot = true;
  };

  zramSwap.enable = true;

  services = {
    btrfs.autoScrub = {
      enable = true;
      interval = "monthly";
      fileSystems = [
        "/"
      ];
    };
    udev.extraRules = ''
      ACTION=="add", SUBSYSTEM=="block", KERNEL=="mmcblk[0-9]p[0-9]", ENV{ID_FS_USAGE}=="filesystem", RUN{program}+="${pkgs.systemd}/bin/systemd-mount -o noatime,compress-force=zstd:15,ssd_spread,commit=120 --no-block --automount=yes --collect $devnode /run/media/mmcblk0p1"
    '';

    btrbk = {
      instances = {
        hf = {
          onCalendar = "hourly";
          settings = {
            incremental = "yes";
            snapshot_create = "ondemand";
            snapshot_dir = "@snapshots";
            timestamp_format = "long";

            snapshot_preserve = "2m 2w 5d 5h";
            snapshot_preserve_min = "latest";

            volume = {
              "/mnt/snapshots/root" = {
                snapshot_create = "always";
                subvolume = {
                  "@home" = {};
                };
              };
            };
          };
        };
        #              bak = {
        #                  onCalendar = "daily";
        #                  settings = {
        #	              stream_buffer = "256m";
        #                      stream_compress = "lz4";
        #                      incremental = "yes";
        #                      snapshot_create = "no";
        #                      snapshot_dir = "@snapshots";
        #                      timestamp_format = "long";
        #
        #                      snapshot_preserve_min = "all";
        #                      target_preserve_min = "no";
        #                      target_preserve = "2m 4w 3d";
        #
        #                      ssh_identity = "/etc/btrbk/ssh/id_ed25519_btrbk_nas";
        #                      ssh_user = "btrbk";
        #
        #                      volume =  {
        #                          "/mnt/snapshots/root" = {
        #                              subvolume = {
        #                                  "@home" = {};
        #                              };
        #	                      target = "ssh://jupiter.home.opel-online.de:2220/mnt/snapshots/Mars/@snapshots/@steamdeck";
        #                          };
        #                      };
        #	          };
        #	      };
      };
    };
  };
  #
  #  systemd.timers = {
  #      btrbk-bak = {
  #          requires = [ "network-online.target" ];
  #      };
  #  };

  fileSystems."/" = {
    device = "/dev/mapper/crypted";
    fsType = "btrfs";
    options = ["compress=zstd,space_cache=v2,ssd,noatime,subvol=@,discard=async"];
  };

  fileSystems."/boot" = {
    device = "/dev/disk/by-label/NIXBOOT";
    fsType = "vfat";
  };

  fileSystems."/home" = {
    device = "/dev/mapper/crypted";
    fsType = "btrfs";
    options = ["compress=zstd,space_cache=v2,ssd,noatime,subvol=@home,discard=async"];
  };

  fileSystems."/nix" = {
    device = "/dev/mapper/crypted";
    fsType = "btrfs";
    options = ["compress=zstd,space_cache=v2,ssd,noatime,subvol=@nix,discard=async"];
  };

  fileSystems."/srv" = {
    device = "/dev/mapper/crypted";
    fsType = "btrfs";
    options = ["compress=zstd,space_cache=v2,ssd,noatime,subvol=@srv,discard=async"];
  };

  fileSystems."/swap" = {
    device = "/dev/mapper/crypted";
    fsType = "btrfs";
    options = ["compress=zstd,space_cache=v2,ssd,noatime,subvol=@swap,discard=async"];
  };

  fileSystems."/opt" = {
    device = "/dev/mapper/crypted";
    fsType = "btrfs";
    options = ["compress=zstd,space_cache=v2,ssd,noatime,subvol=@opt,discard=async"];
  };

  fileSystems."/mnt/snapshots/root" = {
    device = "/dev/mapper/crypted";
    fsType = "btrfs";
    options = ["compress=zstd,space_cache=v2,ssd,noatime,subvolid=5,discard=async"];
  };

  #  fileSystems."/sdcard" =
  #    { device = "/dev/disk/by-label/sdcard";
  #      fsType = "ext4";
  #      options = [ "nofail,noauto,users,x-systemd.automount" ];
  #    };

  fileSystems."/mnt/Pluto" = {
    device = "jupiter:/Pluto";
    fsType = "nfs";
    options = ["nofail,noauto,users,x-systemd.automount,x-systemd.device-timeout=10,soft,timeo=14,x-systemd.idle-timeout=1min,sec=sys,exec,nfsvers=4.2"];
  };

  fileSystems."/mnt/Mars" = {
    device = "jupiter:/Mars";
    fsType = "nfs";
    options = ["nofail,noauto,users,x-systemd.automount,x-systemd.device-timeout=10,soft,timeo=14,x-systemd.idle-timeout=1min,sec=sys,exec,nfsvers=4.2"];
  };

  swapDevices = [{device = "/swap/swapfile";}];

  networking = {
    useDHCP = false; # Deprecated
    hostName = "steamdeck";
    wireless.iwd.enable = true;
    networkmanager = {
      enable = true;
      wifi = {
        backend = "iwd";
        powersave = false;
      };
    };
    #    interfaces = {
    #      wlan0 = {
    #        useDHCP = true;                     # For versatility sake, manually edit IP on nm-applet.
    #        #ipv4.addresses = [ {
    #        #    address = "192.168.0.51";
    #        #    prefixLength = 24;
    #        #} ];
    #      };
    #    };
    #defaultGateway = "192.168.0.1";
    #nameservers = [ "192.168.0.4" ];
    firewall = {
      checkReversePath = "loose";
      enable = true;
      allowedUDPPorts = [24727];
      allowedTCPPorts = [24727];
    };
  };

  hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
  #powerManagement.powertop.enable = true;
  powerManagement = {
    scsiLinkPolicy = "med_power_with_dipm";
  };
}