copnix/modules/nixos/boot/default.nix

{
  pkgs,
  lib,
  inputs,
  ...
}:

{
  imports = [ ];
  environment.systemPackages = [ pkgs.efibootmgr ];

  nixpkgs.overlays = [ inputs.nix-cachyos-kernel.overlays.pinned ];
  boot.kernelPackages = pkgs.cachyosKernels.linuxPackages-cachyos-bore-lto;

  boot.kernelParams = [
    "mitigations=off"
    "nmi_watchdog=1"
    "transparent_hugepage=madvise"
  ];

  boot.kernelModules = [
    "tcp_bbr"
    "sch_fq"
  ];

  boot.kernel.sysctl = {
    "net.core.default_qdisc" = "fq";
    "net.ipv4.tcp_congestion_control" = "bbr";
    "kernel.softlockup_panic" = 1;
    "kernel.hardlockup_panic" = 1;
    "kernel.hung_task_panic" = 1;
    "kernel.panic" = 50;
  };

  boot.loader = {
    timeout = 5;
    efi = {
      canTouchEfiVariables = false;
      efiSysMountPoint = "/boot";
    };

    systemd-boot = {
      enable = true;
      configurationLimit = 5;
    };
  };
}