diff --git a/.claude/settings.local.json b/.claude/settings.local.json
index 2aaeb46..8463192 100644
--- a/.claude/settings.local.json
+++ b/.claude/settings.local.json
@@ -2,7 +2,8 @@
   "permissions": {
     "allow": [
       "WebSearch",
-      "WebFetch(domain:forgejo.org)"
+      "WebFetch(domain:forgejo.org)",
+      "Bash(ssh:*)"
     ]
   }
 }
diff --git a/system/machines/server/modules/frigate/default.nix b/system/machines/server/modules/frigate/default.nix
index 4b5f0c1..e067de0 100644
--- a/system/machines/server/modules/frigate/default.nix
+++ b/system/machines/server/modules/frigate/default.nix
@@ -95,11 +95,7 @@ in
           ];
         };
 
-        audio_transcription = {
-          enabled = true;
-          model_size = "small";
-          language = "en";
-        };
+        audio_transcription.enabled = false;
 
         record = {
           enabled = true;
diff --git a/system/machines/server/system.nix b/system/machines/server/system.nix
index 5905c4d..1b64047 100644
--- a/system/machines/server/system.nix
+++ b/system/machines/server/system.nix
@@ -68,12 +68,14 @@
       enable = true;
       devices = [ "nodev" ];
       efiSupport = true;
+      efiInstallAsRemovable = true;  # HP Z230 UEFI ignores custom boot entries
       configurationLimit = 5;
       splashImage = null;
     };
 
     efi = {
-      canTouchEfiVariables = true;
+      canTouchEfiVariables = false;  # Not needed with efiInstallAsRemovable
+      efiSysMountPoint = "/boot";
     };
   };
 
@@ -82,6 +84,7 @@
     git
     vim
     htop
+    dmidecode
   ];
 
   security.sudo = {