feat: bump flakes, enable Steam, update kernel/NVIDIA, refine net+security

hosts/Nixstation/default.nix

@@ -12,7 +12,7 @@
   boot = {
     loader.systemd-boot.enable = true;
     loader.efi.canTouchEfiVariables = true;
-    # kernelPackages = pkgs.linuxPackages_6_16;
+    kernelPackages = pkgs.linuxPackages_latest;
   };
 
   environment = {
@@ -20,9 +20,6 @@
       act
       btrfs-progs
       cudatoolkit
-      networkmanagerapplet
-      libwacom
-      wacomtablet
     ];
   };
 
@@ -62,18 +59,21 @@
   };
 
   programs = {
-    # steam = {
-    #   enable = true;
-    #   remotePlay.openFirewall = true;
-    #   dedicatedServer.openFirewall = true;
-    #   localNetworkGameTransfers.openFirewall = true;
-
-    # };
     dconf.enable = true;
     virt-manager.enable = true;
   };
-  security.pam.services.gdm.enableGnomeKeyring = true;
-  security.rtkit.enable = true;
+  security = {
+    pam.services.gdm.enableGnomeKeyring = true;
+    polkit.enable = true;
+    polkit.extraConfig = ''
+      polkit.addRule(function(action, subject) {
+        if (action.id == "org.bluez.GattProfile1.Release") {
+          return polkit.Result.YES;
+        }
+      });
+    '';
+    rtkit.enable = true;
+  };
   services = {
     xserver = {
       xkb = {
@@ -82,7 +82,6 @@
       };
     };
     desktopManager.gnome.enable = true;
-
     displayManager = {
       gdm.enable = true;
       gdm.wayland = true;

hosts/Nixstation/hardware-configuration.nix

@@ -20,9 +20,9 @@
       "sd_mod"
       "xhci_pci"
     ];
-    kernelParams = [ "amd_pstate=active" ];
+    kernelParams = [ "amd_pstate=active" "usbcore.autosuspend=-1"];
     initrd.kernelModules = [ ];
-    kernelModules = [ "kvm-amd" ];
+    kernelModules = [ "kvm-amd" "iwlwifi" ];
     extraModulePackages = [ ];
   };
   fileSystems = {
@@ -59,5 +59,10 @@
     bluetooth.enable = true;
   };
 
-  services.blueman.enable = true;
+  services = {
+    blueman.enable = true;
+    udev.extraRules = ''
+      ACTION=="add", SUBSYSTEM=="usb", TEST=="power/control", ATTR{power/control}="on"
+    '';
+  };
 }