diff --git a/.claude/settings.local.json b/.claude/settings.local.json
index 8463192..2aaeb46 100644
--- a/.claude/settings.local.json
+++ b/.claude/settings.local.json
@@ -2,8 +2,7 @@
   "permissions": {
     "allow": [
       "WebSearch",
-      "WebFetch(domain:forgejo.org)",
-      "Bash(ssh:*)"
+      "WebFetch(domain:forgejo.org)"
     ]
   }
 }
diff --git a/system/machines/server/modules/frigate/default.nix b/system/machines/server/modules/frigate/default.nix
index e067de0..4b5f0c1 100644
--- a/system/machines/server/modules/frigate/default.nix
+++ b/system/machines/server/modules/frigate/default.nix
@@ -95,7 +95,11 @@ in
           ];
         };
 
-        audio_transcription.enabled = false;
+        audio_transcription = {
+          enabled = true;
+          model_size = "small";
+          language = "en";
+        };
 
         record = {
           enabled = true;
diff --git a/system/machines/server/system.nix b/system/machines/server/system.nix
index 1b64047..5905c4d 100644
--- a/system/machines/server/system.nix
+++ b/system/machines/server/system.nix
@@ -68,14 +68,12 @@
       enable = true;
       devices = [ "nodev" ];
       efiSupport = true;
-      efiInstallAsRemovable = true;  # HP Z230 UEFI ignores custom boot entries
       configurationLimit = 5;
       splashImage = null;
     };
 
     efi = {
-      canTouchEfiVariables = false;  # Not needed with efiInstallAsRemovable
-      efiSysMountPoint = "/boot";
+      canTouchEfiVariables = true;
     };
   };
 
@@ -84,7 +82,6 @@
     git
     vim
     htop
-    dmidecode
   ];
 
   security.sudo = {