feat!: enable hibernation again

modules/programs/hyprland/default.nix

@@ -95,16 +95,31 @@ in
             command = "${pkgs.swaylock}/bin/swaylock -fF";
           }
         ];
-        timeouts = [
+        timeouts =
+          let
+            lockTimeout = 10;
+          in
+          [
             {
-            timeout = 300;
+              timeout = lockTimeout * 60 - 10;
+              command = "${pkgs.libnotify}/bin/notify-send 'Locking screen!'";
+            }
+            {
+              timeout = lockTimeout * 60;
               command = "${hyprland}/bin/hyprctl dispatch dpms off";
               resumeCommand = "${hyprland}/bin/hyprctl dispatch dpms on";
             }
             {
-            timeout = 310;
+              timeout = lockTimeout * 60 + 10;
               command = "${pkgs.systemd}/bin/loginctl lock-session";
             }
+          ] ++ optional
+            (!cfg.nvidiaSupport) # TODO https://github.com/hyprwm/Hyprland/issues/1728
+            [
+              {
+                timeout = 30 * 60;
+                command = "${pkgs.systemd}/bin/systemctl suspend-then-hibernate";
+              }
             ];
         systemdTarget = "hyprland-session.target";
       };

modules/security/default.nix

@@ -4,7 +4,7 @@
 }: {
   ## System security tweaks
   # Prevent replacing the running kernel w/o reboot
-  security.protectKernelImage = lib.mkDefault true;
+  # security.protectKernelImage = lib.mkDefault true; # NOTE disabled for now to enable hibernate
 
   # tmpfs = /tmp is mounted in ram. Doing so makes temp file management speedy
   # on ssd systems, and volatile! Because it's wiped on reboot.