From 1d3a3cc80552eeec37bd5fcc443211248381c158 Mon Sep 17 00:00:00 2001
From: Nikolaos Karaolidis <nick@karaolidis.com>
Date: Sun, 7 Sep 2025 00:28:07 +0100
Subject: [PATCH] Lobotomize jupiter cpu

Signed-off-by: Nikolaos Karaolidis <nick@karaolidis.com>
---
 hosts/common/configs/user/console/attic/default.nix |  2 +-
 hosts/himalia/hardware/default.nix                  |  1 -
 hosts/jupiter/hardware/default.nix                  | 13 ++++++++++---
 .../storm/configs/console/podman/attic/default.nix  |  4 ++--
 packages/docker/gitea-act-runner/entrypoint.sh      | 11 +++++------
 5 files changed, 18 insertions(+), 13 deletions(-)

diff --git a/hosts/common/configs/user/console/attic/default.nix b/hosts/common/configs/user/console/attic/default.nix
index 83f322e..644fd07 100644
--- a/hosts/common/configs/user/console/attic/default.nix
+++ b/hosts/common/configs/user/console/attic/default.nix
@@ -13,7 +13,7 @@ in
     sops = {
       secrets."nix/cache/nix.karaolidis.com".sopsFile = "${inputs.secrets}/domains/personal/secrets.yaml";
 
-      templates."attic" = {
+      templates.attic = {
         content = builtins.readFile (
           (pkgs.formats.toml { }).generate "config.toml" {
             default-server = "main";
diff --git a/hosts/himalia/hardware/default.nix b/hosts/himalia/hardware/default.nix
index 461346e..6d30429 100644
--- a/hosts/himalia/hardware/default.nix
+++ b/hosts/himalia/hardware/default.nix
@@ -88,7 +88,6 @@
   services = {
     xserver.videoDrivers = [ "nvidia" ];
     fstrim.enable = true;
-    tlp.settings.DISK_DEVICES = lib.mkDefault "nvme0n1 nvme1n1";
 
     asusd = {
       enable = true;
diff --git a/hosts/jupiter/hardware/default.nix b/hosts/jupiter/hardware/default.nix
index a361ffe..ea8448c 100644
--- a/hosts/jupiter/hardware/default.nix
+++ b/hosts/jupiter/hardware/default.nix
@@ -1,7 +1,6 @@
 {
   config,
   pkgs,
-  lib,
   inputs,
   ...
 }:
@@ -65,8 +64,17 @@
       config.virtualisation.containerd.enable || config.virtualisation.podman.enable;
   };
 
+  # Lobotomize CPU so that it stays below boiling temps
+  powerManagement = {
+    cpuFreqGovernor = "conservative";
+    cpufreq = {
+      min = 403488;
+      max = 4465261;
+    };
+  };
+
   boot = {
-    kernelParams = [ "amd_pstate=active" ];
+    kernelParams = [ "amd_pstate=passive" ];
     kernelModules = [ "kvm-amd" ];
     initrd.kernelModules = [
       "nvme"
@@ -92,7 +100,6 @@
   services = {
     xserver.videoDrivers = [ "nvidia" ];
     fstrim.enable = true;
-    tlp.settings.DISK_DEVICES = lib.mkDefault "nvme0n1 nvme1n1";
     logind.settings.Login.HandleLidSwitch = "ignore";
   };
 }
diff --git a/hosts/jupiter/users/storm/configs/console/podman/attic/default.nix b/hosts/jupiter/users/storm/configs/console/podman/attic/default.nix
index b3bcf1d..9ae88bd 100644
--- a/hosts/jupiter/users/storm/configs/console/podman/attic/default.nix
+++ b/hosts/jupiter/users/storm/configs/console/podman/attic/default.nix
@@ -27,7 +27,7 @@ in
           ATTIC_TOKEN=${hmConfig.sops.placeholder."attic/admin"}
         '';
 
-        attic.content = builtins.readFile (
+        attic-server.content = builtins.readFile (
           (pkgs.formats.toml { }).generate "server.toml" {
             listen = "[::]:8080";
 
@@ -85,7 +85,7 @@ in
             ];
             volumes = [
               "/mnt/storage/private/storm/containers/storage/volumes/attic/_data:/var/lib/attic"
-              "${hmConfig.sops.templates.attic.path}:/etc/attic/server.toml"
+              "${hmConfig.sops.templates.attic-server.path}:/etc/attic/server.toml"
             ];
             environmentFiles = [ hmConfig.sops.templates.attic-env.path ];
             exec = [
diff --git a/packages/docker/gitea-act-runner/entrypoint.sh b/packages/docker/gitea-act-runner/entrypoint.sh
index a8e52b5..6a1fdca 100644
--- a/packages/docker/gitea-act-runner/entrypoint.sh
+++ b/packages/docker/gitea-act-runner/entrypoint.sh
@@ -18,13 +18,12 @@ mkfifo "$LOG_PIPE"
   done < "$LOG_PIPE"
 ) &
 
+GITEA_API="${GITEA_INSTANCE_URL%/}/api/v1"
+
+auth="Authorization: Basic $(printf '%s:%s' "$GITEA_ADMIN_USERNAME" "$GITEA_ADMIN_PASSWORD" | base64 -w 0)"
+runners="$(curl -sf --retry 10 --retry-connrefused -H "$auth" "$GITEA_API/admin/actions/runners")"
+
 if [ ! -f /var/lib/gitea-act-runner/registration ]; then
-  GITEA_API="${GITEA_INSTANCE_URL%/}/api/v1"
-
-  auth="Authorization: Basic $(printf '%s:%s' "$GITEA_ADMIN_USERNAME" "$GITEA_ADMIN_PASSWORD" | base64 -w 0)"
-
-  runners="$(curl -sf --retry 10 --retry-connrefused -H "$auth" "$GITEA_API/admin/actions/runners")"
-
   echo "$runners" | jq -r ".runners[] | select(.name == \"$GITEA_RUNNER_NAME\") | .id" | while read -r runner_id; do
     curl -sf -X DELETE -H "$auth" "$GITEA_API/admin/actions/runners/$runner_id"
   done