Kyle Isom
eecb3973b1
rift: sysctl to allow rootless containers to bind port 53, open firewall for DNS queries from LAN clients. vade: point nameservers at rift (LAN + Tailscale) for internal service resolution via CoreDNS (MCNS precursor). Falls back to 1.1.1.1/8.8.8.8 via systemd-resolved. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
48 lines
1.3 KiB
Nix
48 lines
1.3 KiB
Nix
{ inputs, ... }:
|
|
|
|
{
|
|
imports = [
|
|
inputs.nixos-hardware.nixosModules.framework-12-13th-gen-intel
|
|
./hardware-configuration.nix
|
|
../../configs/desktop-light.nix
|
|
../../configs/qemu.nix
|
|
];
|
|
|
|
# Power optimization for Framework 12 laptop
|
|
|
|
# Thermald works alongside TLP (from nixos-hardware) for better thermal/power management
|
|
services.thermald.enable = true;
|
|
|
|
# WiFi power saving - enables 802.11 power save mode
|
|
networking.networkmanager.wifi.powersave = true;
|
|
|
|
# Bluetooth power optimization - don't power on at boot, disable fast connect
|
|
hardware.bluetooth = {
|
|
powerOnBoot = false;
|
|
settings.General.FastConnectable = false;
|
|
};
|
|
|
|
# Audio power saving - Intel HDA codec powers down after 1 second of silence
|
|
boot.extraModprobeConfig = ''
|
|
options snd_hda_intel power_save=1
|
|
'';
|
|
|
|
# ILITEK USI stylus/touchscreen support
|
|
# The stylus device is misclassified as a keyboard by the default evdev
|
|
# catchall. Force it to use libinput as a tablet device.
|
|
services.xserver.inputClassSections = [
|
|
''
|
|
Identifier "ILITEK stylus tablet"
|
|
MatchProduct "ILIT2901:00 222A:5539 Stylus"
|
|
MatchDevicePath "/dev/input/event*"
|
|
Driver "libinput"
|
|
''
|
|
];
|
|
|
|
# Use rift's CoreDNS (MCNS precursor) for internal service resolution.
|
|
networking.nameservers = [
|
|
"192.168.88.181"
|
|
"100.95.252.120"
|
|
];
|
|
}
|