My nixOS config
- Nix 100%
After a cold boot the EM160R-GL often drops off the PCIe link 10-20s
after probe ("Unable to change power state from D3cold to D0", config
space reads all-ones) and never brings up its wwan ports. Until now
only a hibernate/resume cycle brought it back.
An ACPI _RST through the PCI reset attribute does the same at runtime.
The rescan after it catches the firmware mid-boot, under the generic
Qualcomm ID 17cb:0304, which has no FCC unlock script, so ModemManager
fails with "Couldn't set operating mode". A second rescan once the
firmware is up gets 1eac:100d back and the modem enables normally.
The service does nothing if wwan ports show up within 60s of boot.
The recovery sequence was verified by hand on 7.2.11; the service has
not yet run it on a real cold boot.
Assisted-by: Claude:opus-5-5
|
||
|---|---|---|
| modules | ||
| patches | ||
| secrets | ||
| .gitignore | ||
| .sops.yaml | ||
| configuration.nix | ||
| flake.lock | ||
| flake.nix | ||
| hardware-configuration.nix | ||
| README.md | ||
NixOS
Assisted-by: Claude (claude-opus-4-5 → claude-opus-4-6 → claude-opus-4-7 → claude-opus-4-8 → claude-fable-5)
Flake-based NixOS configuration for a ThinkPad P14s Gen 6 (AMD), tracking nixos-unstable.
Highlights
- Secure Boot via lanzaboote
- Secrets: sops-nix with age — xray config, WireGuard, SSH keys, private routes/hosts; encrypted files stay out of the repo (only
.examplestructure files are tracked), decrypted to/run/secretsat activation - Desktop: GNOME on Wayland, AMD GPU
- Local LLMs: Ollama with ROCm (gfx1151) + Lemonade for XDNA2 NPU serving via nix-amd-ai
- Networking: Xray VLESS+Reality with sing-box TUN, WireGuard, WWAN modem
- Gaming: Steam with gamescope, declarative Flatpaks via nix-flatpak
- Litecoin Core (MWEB): vendored package build, revived after removal from nixpkgs
- Power: AMD P-State tuning, zram swap ahead of disk swap
Layout
flake.nix # inputs and host definition
configuration.nix # entry point, imports modules
modules/ # one module per concern (boot, desktop, ollama, xray, ...)
secrets/ # sops-encrypted (age) secrets, gitignored; .example files document structure
Usage
sudo nixos-rebuild switch --flake /etc/nixos#meow
Fresh install: restore secrets/ and the age key (/var/lib/sops-nix/key.txt) from out-of-band backup first.
TODO
- Evaluate Home Manager