From dbdf2047ddfd3255c06eea4ad05176a72832a629 Mon Sep 17 00:00:00 2001
From: Silas Schöffel <sils@sils.li>
Date: Fri, 16 Jan 2026 20:18:08 +0100
Subject: sys/users: add realtime group

---
 sys/users/default.nix | 31 ++++++++++++++++++++++++++++++-
 1 file changed, 30 insertions(+), 1 deletion(-)

(limited to 'sys/users')

diff --git a/sys/users/default.nix b/sys/users/default.nix
index a6f8877..b1ff018 100644
--- a/sys/users/default.nix
+++ b/sys/users/default.nix
@@ -11,8 +11,37 @@
       home = "/home/sils";
       shell = pkgs.zsh;
       initialHashedPassword = "$y$j9T$r4578Hy9jZHmUH9uSr9OI.$SuR2anRq7EJ1gUJ6vi9qYmZrhLP.o3O5643IG6r5Ap/";
-      extraGroups = ["wheel" "networkmanager" "video" "libvirtd"];
+      extraGroups = [
+        "wheel"
+        "networkmanager"
+        "video"
+        "libvirtd"
+        "realtime"
+      ];
     };
   };
+  services.udev.extraRules = ''
+    KERNEL=="cpu_dma_latency", GROUP="realtime"
+  '';
+  security.pam.loginLimits = [
+    {
+      domain = "@realtime";
+      type = "-";
+      item = "rtprio";
+      value = 98;
+    }
+    {
+      domain = "@realtime";
+      type = "-";
+      item = "memlock";
+      value = "unlimited";
+    }
+    {
+      domain = "@realtime";
+      type = "-";
+      item = "nice";
+      value = -11;
+    }
+  ];
   programs.zsh.enable = true;
 }
-- 
cgit 1.4.1