From d0d378fb7b3555245f379482930101067bcc7c90 Mon Sep 17 00:00:00 2001
From: Mel <mel@rnrd.eu>
Date: Sat, 30 Aug 2025 00:46:02 +0200
Subject: Upgrade serpentine to new bare metal NUC host

Signed-off-by: Mel <mel@rnrd.eu>
---
 machines/serpentine/devices.nix | 25 +++++++++++++++++++------
 1 file changed, 19 insertions(+), 6 deletions(-)

(limited to 'machines/serpentine/devices.nix')

diff --git a/machines/serpentine/devices.nix b/machines/serpentine/devices.nix
index 66a5568..700b198 100644
--- a/machines/serpentine/devices.nix
+++ b/machines/serpentine/devices.nix
@@ -1,4 +1,4 @@
-{ config, pkgs, ... }:
+{ pkgs, ... }:
 
 {
   boot = {
@@ -8,15 +8,28 @@
     loader.efi.canTouchEfiVariables = true;
   };
 
+  hardware = {
+    enableRedistributableFirmware = true;
+    enableAllFirmware = true;
+
+    graphics = {
+      enable = true;
+      enable32Bit = true;
+    };
+  };
+
+  # trying out this fancy "trust" stuff!
+  systemd.tpm2.enable = true;
+  security.tpm2 = {
+    enable = true;
+    pkcs11.enable = true;
+    tctiEnvironment.enable = true;
+  };
+
   zramSwap = {
     enable = true;
     algorithm = "zstd";
     swapDevices = 1;
     memoryPercent = 50;
   };
-
-  networking.nameservers = [
-    "2606:4700:4700::1111"
-    "2606:4700:4700::1001"
-  ];
 }
-- 
cgit 1.4.1