add swap

hosts/hyuganatsu/default.nix

@@ -20,5 +20,20 @@
       isNormalUser = true;
     };
   };
+  security.doas.extraRules = [
+    {
+      users = ["u2h"];
+      noPass = true;
+      cmd = "rmmod";
+      args = ["wacom"];
+    }
+  ];
   services.xserver.wacom.enable = true;
+  environment.systemPackages = [
+    pkgs.nvtopPackages.amd
+  ];
+  # prevent mouse from waking up suspend
+  services.udev.extraRules = ''
+    ACTION=="add", SUBSYSTEM=="usb", DRIVERS=="usb", ATTRS{idVendor}=="046d", ATTRS{idProduct}=="c547", ATTR{power/wakeup}="disabled"
+  '';
 }

hosts/hyuganatsu/hardware-configuration.nix

@@ -25,9 +25,12 @@
   fileSystems."/boot" = {
     device = "/dev/disk/by-uuid/1FF4-8F2A";
     fsType = "vfat";
+    options = ["fmask=0022" "dmask=0022"];
   };
 
-  swapDevices = [];
+  swapDevices = [
+    {device = "/dev/disk/by-uuid/fb2a814c-00ac-4458-a06a-fb8244ff953a";}
+  ];
 
   # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
   # (the default) this is the recommended approach. When using systemd-networkd it's

system/security.nix

@@ -6,6 +6,11 @@
         groups = ["wheel"];
         persist = true;
       }
+      {
+        groups = ["wheel"];
+        noPass = true;
+        cmd = "journalctl";
+      }
     ];
   };
   security.polkit.enable = true;

user/home.nix

@@ -13,7 +13,7 @@
       buildInputs = [pkgs.makeWrapper];
       postBuild = ''
         wrapProgram $out/bin/firefox \
-          --set HOME "${config.home.homeDirectory}/.local/share"
+          --set HOME "${config.home.homeDirectory}/.local/home"
       '';
     })
     alacritty

user/xdg.nix

@@ -1,4 +1,8 @@
-{pkgs, ...}: {
+{
+  config,
+  pkgs,
+  ...
+}: {
   xdg.mimeApps.enable = true;
   xdg.mimeApps.defaultApplications = let
     image = "nsxiv-rifle.desktop";
@@ -29,4 +33,13 @@
     extraPortals = [pkgs.libsForQt5.xdg-desktop-portal-kde];
     config.common.default = "kde";
   };
+  home.file = let
+    mkln = x: config.lib.file.mkOutOfStoreSymlink "${config.home.homeDirectory}/${x}";
+  in {
+    ".local/home/.cache".source = mkln ".cache";
+    ".local/home/.config".source = mkln ".config";
+    ".local/home/.local".source = mkln ".local";
+    ".local/home/Desktop".source = mkln "Desktop";
+    ".local/home/Downloads".source = mkln "Downloads";
+  };
 }