caesium: thunderbird and vscode updates

caesium.nixos.nix

@@ -1,14 +1,17 @@
-{ config, pkgs, ... }:
+{ pkgs, ... }:
 
 {
-  imports = [ 
+  imports = [
     ./caesium.hardware.nix # Crucial: Imports your UUIDs
     ./module.firewall.nix
   ];
 
   time.timeZone = "America/New_York";
   nixpkgs.config.allowUnfree = true;
-  nix.settings.experimental-features = [ "nix-command" "flakes" ];
+  nix.settings.experimental-features = [
+    "nix-command"
+    "flakes"
+  ];
 
   # --- BOOTLOADER ---
   boot.loader.systemd-boot.enable = true;
@@ -44,39 +47,62 @@
   # Primary Swap: Compressed RAM (Fastest)
   zramSwap.enable = true;
   zramSwap.memoryPercent = 25;
+  systemd.oomd.enable = true;
+  services.earlyoom.enable = true;
+  services.earlyoom.freeMemThreshold = 5; # trigger at 5% free RAM
+  services.earlyoom.freeSwapThreshold = 10; # trigger at 10% free swap
 
   # Secondary Swap: 16GB File on Alpha (Safety Net)
-  swapDevices = [ {
-    device = "/var/lib/swapfile";
-    size = 16 * 1024; # 16GB
-  } ];
+  swapDevices = [
+    {
+      device = "/var/lib/swapfile";
+      size = 16 * 1024; # 16GB
+    }
+  ];
 
   # --- USER & GROUPS ---
-  users.groups.storage = {};
+  users.groups.storage = { };
   users.users.mbessette = {
     isNormalUser = true;
     shell = pkgs.zsh;
-    extraGroups = [ "wheel" "networkmanager" "storage" "docker" ];
+    extraGroups = [
+      "wheel"
+      "networkmanager"
+      "storage"
+      "docker"
+    ];
     openssh.authorizedKeys.keys = [
       "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILsZW38Ad1GAhGgfo7LsBzt6M4oo30VafsmNrILPMVio"
     ];
   };
 
   # --- FILE SYSTEMS (Overrides/Additions) ---
-  # Note: The UUIDs stay in hardware-configuration.nix. 
+  # Note: The UUIDs stay in hardware-configuration.nix.
   # We only list them here if we want to add specific options like compression.
-  
-  fileSystems."/nix".options = [ "subvol=@nix" "compress=zstd" "noatime" ];
+
+  fileSystems."/nix".options = [
+    "subvol=@nix"
+    "compress=zstd"
+    "noatime"
+  ];
   fileSystems."/mnt/bottles" = {
     device = "/dev/disk/by-uuid/9523b80b-8a1f-4784-9750-9b8fadf91b92"; # Use the same Alpha UUID
     fsType = "btrfs";
-    options = [ "subvol=@bottles" "compress=zstd" "noatime" ];
+    options = [
+      "subvol=@bottles"
+      "compress=zstd"
+      "noatime"
+    ];
   };
 
   fileSystems."/mnt/steam-games" = {
     device = "/dev/disk/by-uuid/9523b80b-8a1f-4784-9750-9b8fadf91b92";
     fsType = "btrfs";
-    options = [ "subvol=@steam" "compress=zstd" "noatime" ];
+    options = [
+      "subvol=@steam"
+      "compress=zstd"
+      "noatime"
+    ];
   };
 
   fileSystems."/mnt/Projects" = {
@@ -106,17 +132,17 @@
     alsa.enable = true;
     alsa.support32Bit = true;
     pulse.enable = true;
-    
+
     # Use pulse.rules to target specific apps or set global pulse defaults
     extraConfig.pipewire-pulse."92-discord-fix" = {
       "pulse.rules" = [
         {
-          matches = [ { "application.name" = "~Discord*"; } ];
+          matches = [{ "application.name" = "~Discord*"; }];
           actions = {
             update-props = {
-              "pulse.min.req"     = "1024/48000";
+              "pulse.min.req" = "1024/48000";
               "pulse.default.req" = "1024/48000";
-              "pulse.max.req"     = "2048/48000";
+              "pulse.max.req" = "2048/48000";
               "pulse.min.quantum" = "1024/48000";
             };
           };
@@ -157,6 +183,13 @@
   };
 
   # --- PROGRAMS ---
+  services.printing = {
+    enable = true;
+    drivers = [
+      pkgs.hplip
+    ];
+  };
+
   programs.zsh.enable = true;
 
   programs.steam = {
@@ -179,7 +212,7 @@
 
   environment.systemPackages = with pkgs; [
     ethtool
-    vim 
+    vim
     git
     wget
     curl