all: Add allowDiscards to LUKS and enable weekly fstrim

modules/luks.nix

@@ -8,6 +8,7 @@ in
   boot.initrd.luks.devices."cryptroot" = {
     fallbackToPassword = true;
     keyFile = secretsFile;
+    allowDiscards = true; # Allow TRIM
   };
 
   # copy the secret into the additional initramfs. `null` means same path

roles/all.nix

@@ -47,7 +47,6 @@ in
     PATH = "$PATH:/home/fleaz/bin";
     XDG_SCREENSHOTS_DIR = "/home/fleaz/screenshots/";
     DEFAULT_BROWSER = "${pkgs.firefox}/bin/firefox";
-
   };
 
   console.font = consoleFont config.my.highDPI;
@@ -58,6 +57,9 @@ in
     options = "--delete-older-than 30d";
   };
 
+  # weekly trim
+  services.fstrim.enable = true;
+
   networking.extraHosts = ''
   '';
 }