New system.

nixos/configuration.nix

@@ -161,11 +161,13 @@
     catppuccin-sddm-corners
   ];
 
-  # Wireguard settings
+  # firewall settings
   networking.firewall = {
     enable = true;
     # allow specific tcp ports
-    allowedTCPPorts = [ 2234 ];
+    allowedTCPPorts = [ 2234 22000 ];
+    # allow specific udp ports
+    allowedUDPPorts = [ 22000 21027 ];
     # if packets are still dropped, they will show up in dmesg
     logReversePathDrops = true;
     # wireguard trips rpfilter up
@@ -185,6 +187,9 @@
   # Enable ratbagd for mice configuration
   services.ratbagd.enable = true;
 
+  # Enable firmware updater
+  services.fwupd.enable = true;
+
   # Setup syncthing
   services = {
     syncthing = {
@@ -238,7 +243,7 @@
     serviceConfig = {
       Type = "oneshot";
       ExecStart = toString (pkgs.writeShellScript "ryzenadj-setup" ''
-        ${pkgs.ryzenadj}/bin/ryzenadj --stapm-limit 35000 --fast-limit 35000 --slow-limit 35000 --slow-time 60 --stapm-time 1000 --tctl-temp 75 --vrmmax-current 65000
+        ${pkgs.ryzenadj}/bin/ryzenadj --stapm-limit 35000 --fast-limit 35000 --slow-limit 35000 --slow-time 60 --stapm-time 1000 --tctl-temp 80 --vrmmax-current 65000
       '');
     };
     wantedBy = [ "default.target" ];

nixos/hardware-configuration.nix

@@ -1,7 +1,7 @@
 # Do not modify this file!  It was generated by ‘nixos-generate-config’
 # and may be overwritten by future invocations.  Please make changes
 # to /etc/nixos/configuration.nix instead.
-{ config, lib, modulesPath, ... }:
+{ config, lib, pkgs, modulesPath, ... }:
 
 {
   imports =
@@ -11,20 +11,19 @@
   boot.initrd.availableKernelModules = [ "nvme" "xhci_pci" "ahci" "usbhid" "usb_storage" "sd_mod" ];
   boot.initrd.kernelModules = [ ];
   boot.kernelModules = [ "kvm-amd" ];
+  boot.extraModulePackages = [ ];
 
   fileSystems."/" =
-    { device = "/dev/disk/by-uuid/378a2cc3-3885-4d83-98d6-cbbf5dfc73fd";
+    { device = "/dev/disk/by-uuid/35fda926-38bd-4da4-984e-054f768e2e95";
       fsType = "ext4";
     };
 
   fileSystems."/boot" =
-    { device = "/dev/disk/by-uuid/62C0-1109";
+    { device = "/dev/disk/by-uuid/7BBE-9699";
       fsType = "vfat";
     };
 
-  swapDevices =
-    [ { device = "/dev/disk/by-uuid/e76bb593-aa6c-4aa6-bf2d-723e3be01edc"; }
-    ];
+  swapDevices = [ ];
 
   # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
   # (the default) this is the recommended approach. When using systemd-networkd it's