From 469146da6019ecafeec7c96627f39771d0087373 Mon Sep 17 00:00:00 2001
From: Asmir A <asmir.abdulahovic@gmail.com>
Date: Sun, 1 Oct 2023 21:14:30 +0200
Subject: [PATCH] all systems: enable memtest86; blue/nix_store: set read only

---
 blue/configuration.nix     | 8 ++++++--
 mediabox/configuration.nix | 9 ++++++---
 nixy/configuration.nix     | 7 +++++--
 3 files changed, 17 insertions(+), 7 deletions(-)

diff --git a/blue/configuration.nix b/blue/configuration.nix
index 7f5f824..a92c14e 100644
--- a/blue/configuration.nix
+++ b/blue/configuration.nix
@@ -27,9 +27,13 @@
     supportedFilesystems = ["btrfs"];
     tmpOnTmpfs = true;
     initrd.compressor = "zstd";
-    loader.systemd-boot.enable = true;
+    loader.systemd-boot = {
+      enable = true;
+      editor = false;
+      memtest86.enable = true;
+    };
     loader.efi.canTouchEfiVariables = true;
-    #readOnlyNixStore = true;
+    readOnlyNixStore = true;
   };
 
   security = {
diff --git a/mediabox/configuration.nix b/mediabox/configuration.nix
index af7f134..6563b88 100644
--- a/mediabox/configuration.nix
+++ b/mediabox/configuration.nix
@@ -37,8 +37,11 @@
     kernelModules = ["acpi_call"];
     kernelPackages = pkgs.linuxPackages_latest;
     kernelParams = ["msr.allow_writes=on"];
-    loader.systemd-boot.editor = false;
-    loader.systemd-boot.enable = true;
+    loader.systemd-boot = {
+      editor = false;
+      enable = true;
+      memtest86.enable = true;
+    };
     readOnlyNixStore = true;
     supportedFilesystems = ["btrfs"];
     tmpOnTmpfs = true;
@@ -142,7 +145,7 @@
         wantedBy = ["default.target" "suspend.target" "shutdown.target"];
       };
 
-      /* 
+      /*
       "cpu_setting" = {
         description = "Enable turboot boost and undervolt cpu after suspend";
         wantedBy = ["post-resume.target" "multi-user.target"];
diff --git a/nixy/configuration.nix b/nixy/configuration.nix
index 9f5fe94..36b25c1 100644
--- a/nixy/configuration.nix
+++ b/nixy/configuration.nix
@@ -40,8 +40,11 @@
     kernelPackages = pkgs.linuxPackages_latest;
     kernelParams = ["psmouse.synaptics_intertouch=0"];
     loader.efi.canTouchEfiVariables = true;
-    loader.systemd-boot.editor = false;
-    loader.systemd-boot.enable = true;
+    loader.systemd-boot = {
+      editor = false;
+      enable = true;
+      memtest86.enable = true;
+    };
     readOnlyNixStore = true;
     supportedFilesystems = ["btrfs"];
     tmp.useTmpfs = true;