servo: document the anubis openGraph setting

flowy: add bootloader entry to boot into Windows (but i still need to do more config to get Bitlocker to work w/o secure boot)
systemd-boot: enable memtest and edk2 UEFI shell
2025-08-16 07:04:56 +00:00 · 2025-08-16 07:02:37 +00:00 · 2025-08-16 07:00:47 +00:00
3 changed files with 9 additions and 0 deletions
--- a/hosts/by-name/flowy/default.nix
+++ b/hosts/by-name/flowy/default.nix
@@ -22,4 +22,8 @@
  sops.secrets.colin-passwd.neededForUsers = true;

  sane.services.rsync-net.enable = true;
+
+  # add an entry to boot into Windows, as if it had been launched directly from the BIOS.
+  boot.loader.systemd-boot.rebootForBitlocker = true;
+  boot.loader.systemd-boot.windows.primary.efiDeviceHandle = "HD0b";
 }
--- a/hosts/by-name/servo/services/gitea.nix
+++ b/hosts/by-name/servo/services/gitea.nix
@@ -124,6 +124,7 @@

  services.anubis.instances."git.uninsane.org" = {
    settings.TARGET = "http://127.0.0.1:3000";
+    # allow IM clients/etc to show embeds/previews, else they just show "please verify you aren't a bot..."
    botPolicy.openGraph.enabled = true;
  };

--- a/hosts/common/boot.nix
+++ b/hosts/common/boot.nix
@@ -39,6 +39,10 @@
  boot.loader.grub.enable = lib.mkDefault false;
  # boot.loader.generic-extlinux-compatible.enable = lib.mkDefault true;
  boot.loader.systemd-boot.enable = lib.mkDefault true;
+  boot.loader.systemd-boot.configurationLimit = lib.mkDefault 20;
+  boot.loader.systemd-boot.edk2-uefi-shell.enable = lib.mkDefault true;
+  boot.loader.systemd-boot.memtest86.enable = lib.mkDefault
+    (lib.meta.availableOn pkgs.stdenv.hostPlatform pkgs.memtest86plus);

  hardware.enableAllFirmware = true;  # firmware with licenses that don't allow for redistribution. fuck lawyers, fuck IP, give me the goddamn firmware.
  # hardware.enableRedistributableFirmware = true;  # proprietary but free-to-distribute firmware (extraneous to `enableAllFirmware` option)
Author	SHA1	Message	Date
Colin	f7327bef3e	servo: document the anubis openGraph setting	2025-08-16 07:04:56 +00:00
Colin	47fb8296db	flowy: add bootloader entry to boot into Windows (but i still need to do more config to get Bitlocker to work w/o secure boot)	2025-08-16 07:02:37 +00:00
Colin	b409fbb5f7	systemd-boot: enable memtest and edk2 UEFI shell	2025-08-16 07:00:47 +00:00