1 files changed, 24 insertions, 18 deletions
diff --git a/machines/x/configuration.nix b/machines/x/configuration.nix
index 82db98f..64da9ac 100644
--- a/machines/x/configuration.nix
+++ b/machines/x/configuration.nix
@@ -26,8 +26,16 @@
     "wm_utils.nix"
   ]);
 
-  boot.loader.grub.enable = true;
-  boot.loader.grub.efiSupport = true;
+  boot.loader = {
+    efi = {
+      canTouchEfiVariables = true;
+    };
+    grub = {
+      enable = true;
+      efiSupport = true;
+      device = "/dev/nvme0n1";
+    };
+  };
 
   boot.initrd.postDeviceCommands = lib.mkAfter ''
     mkdir /btrfs_tmp
@@ -54,19 +62,6 @@
     umount /btrfs_tmp
   '';
 
-  boot.extraModprobeConfig = "options kvm_amd nested=1";
-
-  nixpkgs.config.allowUnfree = true;
-  nixpkgs.config.allowUnfreePredicate = _: true;
-
-  services.fstrim.enable = true;
-
-  networking.hostName = "x";
-
-  environment.variables = {
-    XCURSOR_SIZE = "16";
-  };
-
   fileSystems."/persist".neededForBoot = true;
   environment.persistence."/persist/system" = {
     hideMounts = true;
@@ -77,18 +72,29 @@
       "/var/lib/nixos"
       "/var/lib/systemd/coredump"
       "/etc/NetworkManager/system-connections"
-      { directory = "/var/lib/colord"; user = "colord"; group = "colord"; mode = "u=rwx,g=rx,o="; }
     ];
     files = [
       "/etc/machine-id"
-      "/etc/shadow"
       { file = "/var/keys/secret_file"; parentDirectory = { mode = "u=rwx,g=,o="; }; }
     ];
   };
 
+  boot.extraModprobeConfig = "options kvm_amd nested=1";
+
+  nixpkgs.config.allowUnfree = true;
+  nixpkgs.config.allowUnfreePredicate = _: true;
+
+  services.fstrim.enable = true;
+
+  networking.hostName = "x";
+
+  environment.variables = {
+    XCURSOR_SIZE = "16";
+  };
+
   programs.fuse.userAllowOther = true;
   home-manager = {
-    extraSpecialArgs = {inherit inputs;};
+    extraSpecialArgs = { inherit inputs; };
     users = {
       "compromyse" = import ./home.nix;
     };