{pkgs, ...}: { users = { groups.sils = { gid = 1111; }; mutableUsers = false; users.sils = { isNormalUser = true; uid = 1000; group = "sils"; home = "/home/sils"; shell = pkgs.zsh; initialHashedPassword = "$y$j9T$r4578Hy9jZHmUH9uSr9OI.$SuR2anRq7EJ1gUJ6vi9qYmZrhLP.o3O5643IG6r5Ap/"; extraGroups = [ "wheel" "networkmanager" "video" "libvirtd" "realtime" ]; }; }; services.udev.extraRules = '' KERNEL=="cpu_dma_latency", GROUP="realtime" ''; security.pam.loginLimits = [ { domain = "@realtime"; type = "-"; item = "rtprio"; value = 98; } { domain = "@realtime"; type = "-"; item = "memlock"; value = "unlimited"; } { domain = "@realtime"; type = "-"; item = "nice"; value = -11; } ]; programs.zsh.enable = true; }