cleanup

etcnixos/common.nix

@@ -13,37 +13,32 @@
     ./declarative-nm.nix
 
     inputs.nixos-hardware.nixosModules.common-pc-ssd
-
   ];
 
   nix = {
-    #garbage collection and cleanup stuff
+    # garbage collection and cleanup stuff
     gc = {
       automatic = true;
       dates = "weekly";
       options = "--delete-older-than 7d";
     };
 
-    #optimize the store
+    # optimize the store
     optimise.automatic = true;
 
-    #enable flakes!
+    # enable flakes!
     settings.experimental-features = [
       "nix-command"
       "flakes"
     ];
   };
 
-  #kernel options
+  # kernel options
   boot = {
     kernelPackages = pkgs.linuxPackages_cachyos-lto;
 
     kernel.sysctl = {
-      #for profiling
-      "kernel.perf_event_paranoid" = 1;
-      "kernel.kptr_restrict" = 0;
-
-      #dmesg shushhhhh
+      # dmesg shushhhhh
       "kernel.printk" = "2 4 1 7";
     };
 
@@ -61,18 +56,18 @@
   };
 
   environment.etc = {
-    #override default nixos /etc/issue
+    # override default nixos /etc/issue
     "issue".text = "";
   };
 
   services = {
-    #fwupd for updating firmware
+    # fwupd for updating firmware
     fwupd = {
       enable = true;
       extraRemotes = [ "lvfs-testing" ];
     };
 
-    #auto detect network printers
+    # auto detect network printers
     avahi = {
       enable = true;
       nssmdns4 = true;
@@ -85,10 +80,10 @@
       drivers = with pkgs; [ hplip ];
     };
 
-    #disable fprintd (doesn't compile, idk)
+    # disable fprintd (doesn't compile, idk)
     fprintd.enable = false;
 
-    #Making sure mullvad works on boot
+    # Making sure mullvad works on boot
     mullvad-vpn.enable = true;
   };
 
@@ -96,7 +91,7 @@
   time.timeZone = "America/New_York";
 
   security = {
-    #lets use doas and not sudo!
+    # lets use doas and not sudo!
     doas.enable = true;
     sudo.enable = false;
     # Configure doas
@@ -111,12 +106,7 @@
 
   age.identityPaths = [ "/home/${username}/.ssh/id_ed25519" ];
 
-  age.secrets.primary-password = {
-    file = ./secrets/primary-password.age;
-    path = "/etc/secrets/primary-password";
-  };
-
-  #networking
+  # networking
   networking = import ./networking.nix { inherit hostname; };
 
   # Select internationalisation properties.
@@ -139,11 +129,11 @@
     enable = true;
     powerOnBoot = true;
 
-    #Enable experimental features for battery % of bluetooth devices
+    # Enable experimental features for battery % of bluetooth devices
     settings.General.Experimental = true;
   };
 
-  #apply gtk themes by enabling dconf
+  # Apply gtk themes by enabling dconf
   programs.dconf.enable = true;
 
   # Enable sound with pipewire.
@@ -154,8 +144,11 @@
     alsa.enable = true;
     alsa.support32Bit = true;
     pulse.enable = true;
-    # If you want to use JACK applications, uncomment this
-    # jack.enable = true;
+  };
+
+  age.secrets.primary-password = {
+    file = ./secrets/primary-password.age;
+    path = "/etc/secrets/primary-password";
   };
 
   # Define my user account (the rest of the configuration if found in `~/.config/home-manager/...`)
@@ -192,7 +185,7 @@
     extraCompatPackages = with pkgs; [ proton-ge-bin ];
   };
 
-  #System packages
+  # System packages
   environment.systemPackages = with pkgs; [
     mullvad-vpn