From b224ae41ba852b53ce13166d527ea8dcfb7723cb Mon Sep 17 00:00:00 2001
From: Rouven Seifert <rouven@rfive.de>
Date: Thu, 16 May 2024 20:40:16 +0200
Subject: [PATCH 1/3] fujitsu: tuning

---
 hosts/fujitsu/default.nix                | 3 +++
 hosts/fujitsu/hardware-configuration.nix | 1 +
 2 files changed, 4 insertions(+)

diff --git a/hosts/fujitsu/default.nix b/hosts/fujitsu/default.nix
index 7dc15f2..6e5f8d7 100644
--- a/hosts/fujitsu/default.nix
+++ b/hosts/fujitsu/default.nix
@@ -7,6 +7,9 @@
 
   boot.loader.grub.enable = true;
   boot.loader.grub.devices = [ "/dev/sda" "/dev/sdb" ];
+  boot = {
+    kernelPackages = pkgs.linuxPackages_latest;
+  };
   services.btrfs.autoScrub.enable = true;
 
   environment.persistence."/nix/persist/system" = {
diff --git a/hosts/fujitsu/hardware-configuration.nix b/hosts/fujitsu/hardware-configuration.nix
index 75fc55a..bd29015 100644
--- a/hosts/fujitsu/hardware-configuration.nix
+++ b/hosts/fujitsu/hardware-configuration.nix
@@ -7,6 +7,7 @@
 
   boot.initrd.availableKernelModules = [ "ehci_pci" "ata_piix" "usb_storage" "usbhid" "sd_mod" "sr_mod" ];
   boot.initrd.kernelModules = [ ];
+  boot.initrd.systemd.enable = true;
   boot.kernelModules = [ "kvm-intel" ];
   boot.extraModulePackages = [ ];
 

From eabf05f57f0c4028d278cf6b20673423f254f271 Mon Sep 17 00:00:00 2001
From: Rouven Seifert <rouven@rfive.de>
Date: Thu, 16 May 2024 20:42:17 +0200
Subject: [PATCH 2/3] eduroam: blacklist some aps

---
 hosts/thinkpad/modules/networks/uni.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/hosts/thinkpad/modules/networks/uni.nix b/hosts/thinkpad/modules/networks/uni.nix
index 08129be..8fe1cbd 100644
--- a/hosts/thinkpad/modules/networks/uni.nix
+++ b/hosts/thinkpad/modules/networks/uni.nix
@@ -23,7 +23,7 @@
           identity="rose159e@tu-dresden.de"
           password="@EDUROAM_AUTH@"
           phase2="auth=PAP"
-          bssid_ignore=7c:5a:1c:02:3d:ef,82:5a:1c:02:3d:ef
+          bssid_ignore=7c:5a:1c:02:3d:ef 82:5a:1c:02:3d:ef
         '';
         extraConfig = ''
           scan_ssid=1

From 9f8ef5247d3815343597529d4c5d0be86a971bf3 Mon Sep 17 00:00:00 2001
From: Rouven Seifert <rouven@rfive.de>
Date: Thu, 16 May 2024 20:44:47 +0200
Subject: [PATCH 3/3] ausweisapp: open firewall

---
 users/rouven/fixes.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/users/rouven/fixes.nix b/users/rouven/fixes.nix
index 0aa9434..ba07825 100644
--- a/users/rouven/fixes.nix
+++ b/users/rouven/fixes.nix
@@ -58,7 +58,7 @@
   # global wrapper for ausweisapp
   programs.ausweisapp = {
     enable = true;
-    # openFirewall = true;
+    openFirewall = true;
   };
   # home manager steam is borderline broken
   programs.steam.enable = true;