common: enable more systemd stuff

This commit is contained in:
Oystein Kristoffer Tveit 2025-03-15 00:42:24 +01:00
parent 00c97b8da1
commit cce75f872f
Signed by: oysteikt
GPG Key ID: 9F2F7D8250F35146

@ -197,6 +197,7 @@ in {
# Realtime scheduling for pipewire and mpd
security.rtkit.enable = !config.machineVars.headless;
systemd.tpm2.enable = true;
security.tpm2 = {
enable = lib.mkDefault true;
abrmd.enable = lib.mkDefault config.security.tpm2.enable;
@ -217,6 +218,12 @@ in {
Defaults lecture_file = ${sudoLecture}
'';
systemd = {
sysupdate.enable = true;
repart.enable = true;
userdbd.enable = true;
};
boot = {
kernelPackages = lib.mkDefault pkgs.linuxPackages_latest;
loader.systemd-boot.memtest86.enable = true;