44 lines
1.3 KiB
Nix
44 lines
1.3 KiB
Nix
|
# ThinkPad T400 (NixOS). Shared laptop options live in ../../modules/laptop.nix;
|
||
|
|
# only host-specific settings are here.
|
||
|
|
{ ... }:
|
||
|
|
|
||
|
|
{
|
||
|
|
imports = [
|
||
|
|
./hardware-configuration.nix
|
||
|
|
];
|
||
|
|
|
||
|
|
# The T400 is legacy BIOS only (no UEFI), so boot via GRUB in BIOS mode.
|
||
|
|
# `device` must point at the actual install disk -- adjust if it is not /dev/sda.
|
||
|
|
boot.loader.grub = {
|
||
|
|
enable = true;
|
||
|
|
device = "/dev/sda";
|
||
|
|
};
|
||
|
|
|
||
|
|
networking.hostName = "T400-NixOS";
|
||
|
|
|
||
|
|
console.font = "Lat2-Terminus16";
|
||
|
|
|
||
|
|
services.pipewire = {
|
||
|
|
enable = true;
|
||
|
|
pulse.enable = true;
|
||
|
|
};
|
||
|
|
|
||
|
|
# This host accepts SSH, so open 22 (the firewall itself is enabled in
|
||
|
|
# laptop.nix with a default-deny policy).
|
||
|
|
services.openssh.enable = true;
|
||
|
|
networking.firewall.allowedTCPPorts = [ 22 ];
|
||
|
|
|
||
|
|
# The T400's fingerprint reader differs/may be absent; empty service still
|
||
|
|
# lets swaylock authenticate via password.
|
||
|
|
security.pam.services.swaylock = { };
|
||
|
|
|
||
|
|
# Intel Core 2 (Penryn) microcode + redistributable firmware for the Intel
|
||
|
|
# WiFi Link 5100/5300 iwlwifi blobs. The GMA 4500MHD works out of the box via
|
||
|
|
# i915/KMS, so no extra graphics config is needed.
|
||
|
|
hardware.cpu.intel.updateMicrocode = true;
|
||
|
|
hardware.enableRedistributableFirmware = true;
|
||
|
|
|
||
|
|
# See `man configuration.nix` / the stateVersion docs before changing.
|
||
|
|
system.stateVersion = "26.05";
|
||
|
|
}
|