pub-solar-os/modules/paranoia/default.nix

{ config, lib, ... }:

with lib;
let
  psCfg = config.pub-solar;
  cfg = config.pub-solar.paranoia;
in
{
  options.pub-solar.paranoia = {
    enable = mkOption {
      description = ''
        Only offer hibernation instead of screen locking and sleeping. This only makes sense
        if your hard drive is encrypted, and ensures that the contents of your drive are
        encrypted if you are not actively using the device.
      '';
      default = false;
      type = types.bool;
    };
  };

  config = mkIf cfg.enable {
    pub-solar.core.hibernation.enable = true;
    services.logind.lidSwitch = "hibernate";

    services.tor.settings = {
      UseBridges = true;
    };
  };
}