feat

modules/nix/boot/nfs.nix

@@ -1,3 +1,4 @@
 _: {
   boot.supportedFilesystems = [ "nfs" ];
+  fuse.userAllowOther = true;
 }

modules/nix/noctalia.nix

@@ -0,0 +1,10 @@
+{
+  pkgs,
+  inputs,
+  ...
+}:
+{
+  environment.systemPackages = with pkgs; [
+    inputs.noctalia.packages.${system}.default
+  ];
+}

modules/nix/power.nix

@@ -0,0 +1,14 @@
+_: {
+  boot.kernelParams = [
+    "mem_sleep_default=deep"
+  ];
+
+  powerManagement = {
+    enable = true;
+    powertop.enable = true;
+  };
+
+  services.power-profiles-daemon.enable = true;
+  services.tlp.enable = false;
+  services.upower.enable = true;
+}

modules/nix/secure-boot.nix

@@ -0,0 +1,21 @@
+{
+  inputs,
+  lib,
+  ...
+}:
+{
+  imports = [
+    inputs.lanzaboote.nixosModules.lanzaboote
+  ];
+
+  boot.loader = {
+    systemd-boot.enable = lib.mkForce false;
+    efi.canTouchEfiVariables = true;
+    efi.efiSysMountPoint = "/boot";
+  };
+
+  boot.lanzaboote = {
+    enable = true;
+    pkiBundle = "/var/lib/sbctl";
+  };
+}