linuxlab.nix/client/hardware.nix

{ config, modulesPath, ... }:

{
  imports = [
    "${modulesPath}/installer/scan/not-detected.nix"
  ];

  nixpkgs.hostPlatform = "x86_64-linux";

  boot = {
    loader = {
      grub = {
        enable = true;
        users = {
          root = {
            hashedPassword = "grub.pbkdf2.sha512.10000.BAB138AB1F53A06E0BAB70B376C16ECCC123824748A9AF6725D24C5947C69EF3CB9AF87FB9F549902BAFE42817B7C58897D9222106B7FC6ECC0C47C945D7471B.D8F6D170B10709A748084EDB1C41D9E92E1AB97D03954C57F310D68E7C07D63AFF8794EF5E263DDCDE663C4482664E70600E7043A77D03E97C7679DA51D35719";
          };
        };
      };
    };

    consoleLogLevel = 3;

    initrd = {
      systemd.enable = true;
      verbose = true;
      availableKernelModules = [
        "xhci_pci"
        "ahci"
        "nvme"
        "usbhid"
      ];
    };

    kernelModules = [ "kvm-intel" ];

    kernelParams = [
      "quiet"
      "udev.log_level=3"
    ];

    plymouth = {
      enable = true;
      theme = "bgrt";
    };
  };

  hardware.enableRedistributableFirmware = true;
  hardware.cpu.intel.updateMicrocode = true;

  disko.devices = {
    disk = {
      root = {
        type = "disk";
        device = "/dev/disk/by-path/pci-0000:04:00.0-nvme-1";
        imageSize = "32G";
        content = {
          type = "gpt";
          partitions = {
            boot = {
              size = "1M";
              type = "EF02";
            };
            ESP = {
              size = "512M";
              type = "EF00";
              content = {
                type = "filesystem";
                format = "vfat";
                mountpoint = "/boot";
              };
            };
            root = {
              end = "-8G";
              content = {
                type = "filesystem";
                format = "ext4";
                mountpoint = "/";
              };
            };
            swap = {
              size = "100%";
              content = {
                type = "swap";
                randomEncryption = true;
                resumeDevice = false;
              };
            };
          };
        };
      };
    };
  };
}