nixos-config/hosts/steamdeck/hardware-configuration.nix

#
# Hardware settings for Teclast F5 10" Laptop
# NixOS @ sda2
#
# flake.nix
#  └─ ./hosts
#      └─ ./laptop
#          └─ hardware-configuration.nix *
#
# Do not modify this file!  It was generated by ‘nixos-generate-config’
# and may be overwritten by future invocations.  Please make changes
# to /etc/nixos/configuration.nix instead.
{ config, lib, pkgs, modulesPath, ... }:

{
  imports =
    [ (modulesPath + "/installer/scan/not-detected.nix")
    ];

  boot = {
	  initrd = {
          availableKernelModules = [ "nvme" "xhci_pci" "usb_storage" "usbhid" "sd_mod" "sdhci_pci" ];
		  kernelModules = [ ];
		  systemd.enable = true;
		  luks = {
			  devices."crypted" = {
				  device = "/dev/disk/by-partlabel/disk-nvme0n1-luks";
				  allowDiscards = true;
                  bypassWorkqueues = true;
			  };
		  };
	  };

	  kernelModules = [ "kvm-amd" "amdgpu" ];
	  kernelParams = [ "luks.options=fido2-device=auto" ];
	  tmp.useTmpfs = false;
	  tmp.cleanOnBoot = true;
  };

  zramSwap.enable = true;

  services = {
      btrfs.autoScrub = {
          enable = true;
          interval = "monthly";
          fileSystems = [
              "/"
          ];
      };
      udev.extraRules = ''
          ACTION=="add", SUBSYSTEM=="block", KERNEL=="mmcblk[0-9]p[0-9]", ENV{ID_FS_USAGE}=="filesystem", RUN{program}+="${pkgs.systemd}/bin/systemd-mount -o noatime,compress-force=zstd:15,ssd_spread,commit=120 --no-block --automount=yes --collect $devnode /run/media/mmcblk0p1"
          '';

      btrbk = {
          instances = {
              hf = {
                  onCalendar = "hourly";
                  settings = {
                      incremental = "yes";
                      snapshot_create = "ondemand";
                      snapshot_dir = "@snapshots";
                      timestamp_format = "long";

                      snapshot_preserve = "2m 2w 5d 5h";
                      snapshot_preserve_min = "latest";
                    
                      volume =  {
                          "/mnt/snapshots/root" = {
                              snapshot_create = "always";
                              subvolume = {
                                  "@home" = {};
                              };
                          };
                      };
                  };
              };
#              bak = {
#                  onCalendar = "daily";
#                  settings = {
#	              stream_buffer = "256m";
#                      stream_compress = "lz4";
#                      incremental = "yes";
#                      snapshot_create = "no";
#                      snapshot_dir = "@snapshots";
#                      timestamp_format = "long";
#
#                      snapshot_preserve_min = "all";
#                      target_preserve_min = "no";
#                      target_preserve = "2m 4w 3d";
#
#                      ssh_identity = "/etc/btrbk/ssh/id_ed25519_btrbk_nas";
#                      ssh_user = "btrbk";
#                    
#                      volume =  {
#                          "/mnt/snapshots/root" = {
#                              subvolume = {
#                                  "@home" = {};
#                              };
#	                      target = "ssh://jupiter.home.opel-online.de:2220/mnt/snapshots/Mars/@snapshots/@steamdeck";
#                          };
#                      };
#	          };
#	      };
          };
      };
  };
#
#  systemd.timers = {
#      btrbk-bak = {
#          requires = [ "network-online.target" ];
#      };
#  };

  fileSystems."/" =
    { device = "/dev/mapper/crypted";
      fsType = "btrfs";
      options = [ "compress=zstd,space_cache=v2,ssd,noatime,subvol=@,discard=async" ];
    };

  fileSystems."/boot" =
    { device = "/dev/disk/by-label/NIXBOOT";
      fsType = "vfat";
    };

  fileSystems."/home" =
    { device = "/dev/mapper/crypted";
      fsType = "btrfs";
      options = [ "compress=zstd,space_cache=v2,ssd,noatime,subvol=@home,discard=async" ];
    };

  fileSystems."/nix" =
    { device = "/dev/mapper/crypted";
      fsType = "btrfs";
      options = [ "compress=zstd,space_cache=v2,ssd,noatime,subvol=@nix,discard=async" ];
    };

  fileSystems."/srv" =
    { device = "/dev/mapper/crypted";
      fsType = "btrfs";
      options = [ "compress=zstd,space_cache=v2,ssd,noatime,subvol=@srv,discard=async" ];
    };

  fileSystems."/swap" =
    { device = "/dev/mapper/crypted";
      fsType = "btrfs";
      options = [ "compress=zstd,space_cache=v2,ssd,noatime,subvol=@swap,discard=async" ];
    };

  fileSystems."/opt" =
    { device = "/dev/mapper/crypted";
      fsType = "btrfs";
      options = [ "compress=zstd,space_cache=v2,ssd,noatime,subvol=@opt,discard=async" ];
    };

  fileSystems."/mnt/snapshots/root" =
    { device = "/dev/mapper/crypted";
      fsType = "btrfs";
      options = [ "compress=zstd,space_cache=v2,ssd,noatime,subvolid=5,discard=async" ];
    };

#  fileSystems."/sdcard" =
#    { device = "/dev/disk/by-label/sdcard";
#      fsType = "ext4";
#      options = [ "nofail,noauto,users,x-systemd.automount" ];
#    };

  fileSystems."/mnt/Pluto" =
    { device = "jupiter:/Pluto";
      fsType = "nfs";
      options = [ "nofail,noauto,users,x-systemd.automount,x-systemd.device-timeout=10,soft,timeo=14,x-systemd.idle-timeout=1min,sec=sys,exec,nfsvers=4.2" ];
    };

  fileSystems."/mnt/Mars" =
    { device = "jupiter:/Mars";
      fsType = "nfs";
      options = [ "nofail,noauto,users,x-systemd.automount,x-systemd.device-timeout=10,soft,timeo=14,x-systemd.idle-timeout=1min,sec=sys,exec,nfsvers=4.2" ];
    };


  swapDevices = [ { device = "/swap/swapfile"; } ];
  

  networking = {
    useDHCP = false;                        # Deprecated
    hostName = "steamdeck";
    wireless.iwd.enable = true;
    networkmanager = {
      enable = true;
      wifi = {
        backend = "iwd";
        powersave = false;
      };
    };
#    interfaces = {
#      wlan0 = {
#        useDHCP = true;                     # For versatility sake, manually edit IP on nm-applet.
#        #ipv4.addresses = [ {
#        #    address = "192.168.0.51";
#        #    prefixLength = 24;
#        #} ];
#      };
#    };
    #defaultGateway = "192.168.0.1";
    #nameservers = [ "192.168.0.4" ];
    firewall = {
      checkReversePath = "loose";
      enable = true;
      allowedUDPPorts = [ 24727 ];
      allowedTCPPorts = [ 24727 ];
    };
  };

  hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
  #powerManagement.powertop.enable = true;
  powerManagement = {
    scsiLinkPolicy = "med_power_with_dipm";
  };
}