btrfs autoscrub + initrd systemd

hosts/mpl/bootloader.nix

@@ -1,12 +1,19 @@
 {...}: {
   # TODO: lanzaboote
-  boot.loader = {
-    efi.canTouchEfiVariables = true;
-
-    timeout = 2;
-    systemd-boot = {
+  boot = {
+    initrd.systemd = {
       enable = true;
-      configurationLimit = 3;
+      enableTpm2 = true;
+    };
+
+    loader = {
+      efi.canTouchEfiVariables = true;
+
+      timeout = 2;
+      systemd-boot = {
+        enable = true;
+        configurationLimit = 3;
+      };
     };
   };
 }

hosts/mpl/mounts.nix

@@ -43,6 +43,8 @@
   };
   environment.systemPackages = [pkgs.ncdu];
 
+  services.btrfs.autoScrub.enable = true;
+
   fileSystems = {
     "/".neededForBoot = true;
     "/etc/ssh" = {