general improvements

1. Security: Navidrome no longer exposed to network (localhost only)
2. Maintainability: Single username definition in flake.nix:45
3. Organization: Kernel params now in configuration.nix, session vars in
desktop.nix
4. Automation: Flathub repository added automatically on activation
5. Cleanup: Removed duplicate programs.dconf.enable
This commit is contained in:
Melvin Ragusa
2026-02-02 23:39:09 +01:00
parent bf2933d4d6
commit 1a7e86e99e
11 changed files with 43 additions and 43 deletions

View File

@@ -5,6 +5,7 @@
pkgs,
inputs,
lib,
username,
...
}:
@@ -35,6 +36,12 @@
boot.loader.efi.canTouchEfiVariables = true;
boot.kernelPackages = pkgs.cachyosKernels.linuxPackages-cachyos-latest-x86_64-v3;
# Kernel parameters (consolidated from modules)
boot.kernelParams = [
"amd_pstate=active" # Modern Ryzen power management (from power.nix)
"amdgpu.ppfeaturemask=0xffffffff" # Full AMD GPU power features (from gpu-amd.nix)
];
# sched-ext scheduler for gaming performance
services.scx.enable = true;
services.scx.scheduler = "scx_lavd"; # Low-latency scheduler, good for gaming
@@ -116,7 +123,7 @@
# ═══════════════════════════════════════════════════════════════
# USER
# ═══════════════════════════════════════════════════════════════
users.users.pinj = {
users.users.${username} = {
isNormalUser = true;
description = "Melvin Ragusa";
extraGroups = [