Personal-use NixOS configuration
0
fork

Configure Feed

Select the types of activity you want to include in your feed.

Switch decryption's boot device (and use LUKS)

encode42 68ac3ddf c1a563e6

+50 -8
+50 -8
hosts/decryption/disks.nix
··· 3 3 disk = { 4 4 main = { 5 5 type = "disk"; 6 - device = "/dev/disk/by-id/nvme-Samsung_SSD_980_1TB_S64ANS0T409404F"; 6 + device = "/dev/disk/by-id/nvme-WD_BLACK_SN7100_1TB_251356803910"; 7 7 8 8 content = { 9 9 type = "gpt"; 10 10 11 11 partitions = { 12 12 ESP = { 13 - end = "500M"; 13 + size = "512M"; 14 14 type = "EF00"; 15 15 16 16 content = { ··· 20 20 mountpoint = "/boot"; 21 21 }; 22 22 }; 23 - root = { 24 - name = "root"; 25 - end = "-0"; 23 + 24 + luks = { 25 + size = "100%"; 26 26 27 27 content = { 28 - type = "filesystem"; 28 + name = "cryptroot"; 29 + type = "luks"; 30 + 31 + extraOpenArgs = [ 32 + "--allow-discards" 33 + "--perf-no_read_workqueue" 34 + "--perf-no_write_workqueue" 35 + ]; 29 36 30 - format = "xfs"; 31 - mountpoint = "/"; 37 + settings = { 38 + crypttabExtraOpts = [ 39 + "tpm-device=auto" 40 + "token-timeout=10" 41 + ]; 42 + }; 43 + 44 + content = { 45 + type = "lvm_pv"; 46 + vg = "vg0"; 47 + }; 32 48 }; 33 49 }; 50 + }; 51 + }; 52 + }; 53 + }; 54 + 55 + lvm_vg.vg0 = { 56 + type = "lvm_vg"; 57 + 58 + lvs = { 59 + root = { 60 + name = "root"; 61 + size = "100%FREE"; 62 + 63 + content = { 64 + type = "filesystem"; 65 + 66 + format = "xfs"; 67 + mountpoint = "/"; 68 + }; 69 + }; 70 + 71 + swap = { 72 + size = "32G"; 73 + 74 + content = { 75 + type = "swap"; 34 76 }; 35 77 }; 36 78 };