aubergine: cups: do not enforce HTTPS

[julm/julm-nix.git] / hosts / aubergine / hardware.nix

diff --git a/hosts/aubergine/hardware.nix b/hosts/aubergine/hardware.nix
index 34cb197efc1811e499e8e261798c41580961170d..62da31c3c9405fb04d4088b27bcc9a7205becf7b 100644 (file)
--- a/hosts/aubergine/hardware.nix
+++ b/hosts/aubergine/hardware.nix
@@ -1,10 +1,12 @@
-{ lib, hostName, ... }:
+{ pkgs, lib, hostName, ... }:
 {
   imports = [
     ../../nixos/profiles/hardware/apu6b4.nix
     ../../nixos/profiles/hardware/ME909u-521.nix
+    ../../nixos/profiles/serial.nix
     ../../nixos/profiles/zfs.nix
     ../../nixos/profiles/zramSwap.nix
+    ../../nixos/profiles/pipewire.nix
   ];
 
   # Setting the machine-id avoids to reencrypt all credentials
@@ -25,7 +27,6 @@
   */
   boot.loader.grub = {
     enable = true;
-    version = 2;
     devices = [
       #"/dev/disk/by-id/mmc-SU08G_0xb0320f0f"
       #"/dev/disk/by-id/usb-Generic-_Multi-Card_20071114173400000-0:0"
@@ -37,14 +38,17 @@
     #efiSupport = true;
     #enableCryptodisk = true;
   };
-  boot.tmpOnTmpfs = true;
 
   boot.supportedFilesystems = [ /*"ntfs"*/ "vfat" ];
   boot.extraModulePackages = [
     #config.boot.kernelPackages.exfat-nofuse
   ];
+  boot.zfs.requestEncryptionCredentials = [ hostName ];
+
+  hardware.enableRedistributableFirmware = true;
 
   powerManagement.powertop.enable = true;
+
   #services.fprintd.enable = true;
 
   fileSystems."/" =
@@ -89,7 +93,4 @@
       }
     ];
 
-  hardware.pulseaudio.enable = lib.mkDefault true;
-  #hardware.pulseaudio.tcp.enable = lib.mkDefault true;
-
 }