all systems: enable memtest86; blue/nix_store: set read only

2023-10-01 21:14:30 +02:00
parent a379efdf01
commit 469146da60
3 changed files with 17 additions and 7 deletions
--- a/blue/configuration.nix
+++ b/blue/configuration.nix
@@ -27,9 +27,13 @@
    supportedFilesystems = ["btrfs"];
    tmpOnTmpfs = true;
    initrd.compressor = "zstd";
-    loader.systemd-boot.enable = true;
+    loader.systemd-boot = {
+      enable = true;
+      editor = false;
+      memtest86.enable = true;
+    };
    loader.efi.canTouchEfiVariables = true;
-    #readOnlyNixStore = true;
+    readOnlyNixStore = true;
  };

  security = {