Upgrade serpentine to new bare metal NUC host

Signed-off-by: Mel <mel@rnrd.eu>

1 files changed, 19 insertions, 6 deletions

diff --git a/machines/serpentine/devices.nix b/machines/serpentine/devices.nix
index 66a5568..700b198 100644
--- a/machines/serpentine/devices.nix
+++ b/machines/serpentine/devices.nix
@@ -1,4 +1,4 @@
-{ config, pkgs, ... }:
+{ pkgs, ... }:
 
 {
   boot = {
@@ -8,15 +8,28 @@
     loader.efi.canTouchEfiVariables = true;
   };
 
+  hardware = {
+    enableRedistributableFirmware = true;
+    enableAllFirmware = true;
+
+    graphics = {
+      enable = true;
+      enable32Bit = true;
+    };
+  };
+
+  # trying out this fancy "trust" stuff!
+  systemd.tpm2.enable = true;
+  security.tpm2 = {
+    enable = true;
+    pkcs11.enable = true;
+    tctiEnvironment.enable = true;
+  };
+
   zramSwap = {
     enable = true;
     algorithm = "zstd";
     swapDevices = 1;
     memoryPercent = 50;
   };
-
-  networking.nameservers = [
-    "2606:4700:4700::1111"
-    "2606:4700:4700::1001"
-  ];
 }