linux-hardened/physical.nix

{ lib, ... }: with lib.kernel; {
  MICROCODE = yes;

  ENERGY_MODEL = yes;
  ACPI_BUTTON = yes;
  ACPI_VIDEO = yes;
  ACPI_FAN = yes;
  ACPI_TAD = yes;
  ACPI_PROCESSOR_AGGREGATOR = yes;
  ACPI_THERMAL = yes;
  ACPI_PCI_SLOT = yes;

  SCSI = yes;
  BLK_DEV_SD = yes;
  CHR_DEV_SG = yes;
  SCSI_CONSTANTS = yes;
  SCSI_SCAN_ASYNC = yes;

  USB_STORAGE = yes;
  USB_UAS = yes;

  LEDS_CLASS = yes;
  LEDS_TRIGGERS = yes;
  LEDS_TRIGGER_PANIC = yes;
  LEDS_TRIGGER_NETDEV = yes;

  EDAC = yes;

  THERMAL = yes;
  THERMAL_NETLINK = yes;
  THERMAL_DEFAULT_GOV_FAIR_SHARE = yes;
  THERMAL_GOV_FAIR_SHARE = yes;

  WDAT_WDT = yes;

  POWERCAP = yes;

  RAS = yes;

  MAGIC_SYSRQ = yes;
  MAGIC_SYSRQ_DEFAULT_ENABLE = freeform "0x1f4";
}