nix-conf/hosts/hyuganatsu/default.nix

{pkgs, ...}: {
  imports = [
    ../../system
    ./hardware-configuration.nix
    ./osu.nix
  ];

  networking.hostName = "hyuganatsu";
  time.timeZone = "America/Chicago";
  services.xserver = {
    videoDrivers = ["amdgpu"];
    deviceSection = ''Option "TearFree" "true"'';
  };
  users.users = {
    ahnwuoa = {
      isNormalUser = true;
      extraGroups = ["wheel" "podman"];
    };
    u2h = {
      isNormalUser = true;
    };
  };
  security.doas.extraRules = [
    {
      users = ["u2h"];
      noPass = true;
      cmd = "rmmod";
      args = ["wacom"];
    }
  ];
  services.xserver.wacom.enable = true;
  environment.systemPackages = [
    pkgs.nvtopPackages.amd
  ];
  # prevent mouse from waking up suspend
  services.udev.extraRules = ''
    ACTION=="add", SUBSYSTEM=="usb", DRIVERS=="usb", ATTRS{idVendor}=="046d", ATTRS{idProduct}=="c547", ATTR{power/wakeup}="disabled"
  '';
  networking.firewall = {
    logReversePathDrops = true;
    extraCommands = ''
      ip46tables -t mangle -I nixos-fw-rpfilter -p udp -m udp --sport 51820 -j RETURN
      ip46tables -t mangle -I nixos-fw-rpfilter -p udp -m udp --dport 51820 -j RETURN
    '';
    extraStopCommands = ''
      ip46tables -t mangle -D nixos-fw-rpfilter -p udp -m udp --sport 51820 -j RETURN || true
      ip46tables -t mangle -D nixos-fw-rpfilter -p udp -m udp --dport 51820 -j RETURN || true
    '';
  };
  services.tailscale.enable = true;
}