From 880efcf2c82a7bb386ca874588c662ef3e1eee73 Mon Sep 17 00:00:00 2001
From: Henrik Lissner <henrik@lissner.net>
Date: Sun, 12 Apr 2020 21:02:09 -0400
Subject: [PATCH] Polish boot.loader settings

---
 hosts/personal.nix | 14 ++++++++++++--
 1 file changed, 12 insertions(+), 2 deletions(-)

diff --git a/hosts/personal.nix b/hosts/personal.nix
index 3c539f68..7d619187 100644
--- a/hosts/personal.nix
+++ b/hosts/personal.nix
@@ -12,8 +12,18 @@
   # Nothing in /tmp should survive a reboot
   boot.tmpOnTmpfs = true;
   # Use simple bootloader; I prefer the on-demand BIOs boot menu
-  boot.loader.systemd-boot.enable = true;
-  boot.loader.efi.canTouchEfiVariables = true;
+  boot.loader = {
+    timeout = 1;
+    efi.canTouchEfiVariables = true;
+    systemd-boot = {
+      enable = true;
+      # Fix a security hole in place for backwards compatibility. See desc in
+      # nixpkgs/nixos/modules/system/boot/loader/systemd-boot/systemd-boot.nix
+      editor = false;
+      # Limit number of generations to display in boot menu
+      configurationLimit = 10;
+    };
+  };
 
   ### Universal defaults
   networking.firewall.enable = true;