devices/wim/hardware-configuration.nix

@@ -10,15 +10,11 @@
   boot = {
     kernelPackages = pkgs.linuxPackages_zen;
 
-    kernelParams = [
+    kernelParams = ["amd_pstate=active"];
-      "amd_pstate=active"
+    kernelModules = ["amdgpu" "kvm-amd"];
-    ];
-    kernelModules = ["amdgpu" "kvm-amd" "acpi_call"];
 
-    extraModulePackages = with config.boot.kernelPackages; [
+    # Zenpower for ryzen cpu monitoring
-      acpi_call
+    extraModulePackages = with config.boot.kernelPackages; [zenpower];
-      zenpower
-    ];
     blacklistedKernelModules = ["k10temp"];
 
     initrd = {

inputs.nix

@@ -142,6 +142,11 @@ let
         repo = "Hyprspace";
       };
 
+      hypridle = mkDep {
+        owner = "hyprwm";
+        repo = "hypridle";
+      };
+
       grim-hyprland = mkDep {
         owner = "eriedaberrie";
         repo = "grim-hyprland";

modules/ags/config/ts/lockscreen/main.ts

@@ -207,10 +207,9 @@ const on_finished = () => {
 lock.connect('finished', on_finished);
 
 if (Vars.hasFprintd) {
-    globalThis.authFinger = () => Utils.authenticate('')
+    Utils.authenticate('')
         .then(() => unlock())
         .catch(logError);
-    globalThis.authFinger();
 }
 
 

modules/hyprland/security.nix

@@ -1,44 +1,14 @@
 {
   config,
+  hypridle,
   lib,
   pkgs,
   ...
 }: let
-  inherit (lib) mkIf;
+  inherit (lib) mkIf optionals;
   inherit (config.vars) mainUser;
 
   isLaptop = config.services.logind.lidSwitch == "lock";
-
-  hmCfg = config.home-manager.users.${mainUser};
-  agsPkg = hmCfg.programs.ags.finalPackage;
-  hyprPkg = hmCfg.wayland.windowManager.hyprland.finalPackage;
-
-  runInDesktop = pkgs.writeShellApplication {
-    name = "runInDesktop";
-    runtimeInputs = [
-      pkgs.sudo
-      agsPkg
-      hyprPkg
-    ];
-    text = ''
-      user="$(id -u ${mainUser})"
-      sig="$(ls "/run/user/$user/hypr/")"
-      export HYPRLAND_INSTANCE_SIGNATURE="$sig"
-
-      sudo -Eu ${mainUser} hyprctl dispatch exec "$@"
-    '';
-  };
-
-  lockPkg = pkgs.writeShellApplication {
-    name = "lock";
-    runtimeInputs = [
-      agsPkg
-    ];
-    text = ''
-      ags -r 'Tablet.setLaptopMode()'
-      ags -b lockscreen -c /home/${mainUser}/.config/ags/lockscreen.js
-    '';
-  };
 in {
   imports = [
     ../greetd
@@ -46,40 +16,39 @@ in {
 
   services.gnome.gnome-keyring.enable = true;
 
-  services.acpid = mkIf isLaptop {
+  home-manager.users.${mainUser} = let
-    enable = true;
+    hmCfg = config.home-manager.users.${mainUser};
-
+    lockPkg = pkgs.writeShellApplication {
-    lidEventCommands = ''
+      name = "lock";
-      LID="/proc/acpi/button/lid/LID/state"
+      runtimeInputs = [
-      state=$(cat "$LID" | ${pkgs.gawk}/bin/awk '{print $2}')
+        hmCfg.programs.ags.finalPackage
-
+      ];
-      case "$state" in
+      text = ''
-          *open*)
+        ags -r 'Tablet.setLaptopMode()'
-              ${runInDesktop}/bin/runInDesktop "ags -b lockscreen -r 'authFinger()'"
+        ags -b lockscreen -c /home/${mainUser}/.config/ags/lockscreen.js
-              ;;
-
-          *close*)
-              ${runInDesktop}/bin/runInDesktop ${lockPkg}/bin/lock
-              ;;
-
-          *)
-              logger -t lid-handler "Failed to detect lid state ($state)"
-              ;;
-      esac
       '';
     };
-
+  in {
-  home-manager.users.${mainUser} = {
     home.packages = [
       pkgs.gnome.seahorse
       lockPkg
     ];
 
+    services.hypridle = mkIf isLaptop {
+      enable = true;
+      package = hypridle.packages.${pkgs.system}.default;
+      settings.general.lock_cmd = "${lockPkg}/bin/lock";
+    };
+
     wayland.windowManager.hyprland = {
       settings = {
-        exec-once = [
+        exec-once =
+          [
             "gnome-keyring-daemon --start --components=secrets"
             "${pkgs.plasma5Packages.polkit-kde-agent}/libexec/polkit-kde-authentication-agent-1"
+          ]
+          ++ optionals isLaptop [
+            "systemctl --user restart hypridle"
           ];
 
         windowrule = [