Personal-use NixOS configuration
Switch decryption's boot device (and use LUKS)
+50
-8
+50
-8
hosts/decryption/disks.nix
+50
-8
hosts/decryption/disks.nix
···
3
3
disk = {
4
4
main = {
5
5
type = "disk";
6
-
device = "/dev/disk/by-id/nvme-Samsung_SSD_980_1TB_S64ANS0T409404F";
6
+
device = "/dev/disk/by-id/nvme-WD_BLACK_SN7100_1TB_251356803910";
7
7
8
8
content = {
9
9
type = "gpt";
10
10
11
11
partitions = {
12
12
ESP = {
13
-
end = "500M";
13
+
size = "512M";
14
14
type = "EF00";
15
15
16
16
content = {
···
20
20
mountpoint = "/boot";
21
21
};
22
22
};
23
-
root = {
24
-
name = "root";
25
-
end = "-0";
23
+
24
+
luks = {
25
+
size = "100%";
26
26
27
27
content = {
28
-
type = "filesystem";
28
+
name = "cryptroot";
29
+
type = "luks";
30
+
31
+
extraOpenArgs = [
32
+
"--allow-discards"
33
+
"--perf-no_read_workqueue"
34
+
"--perf-no_write_workqueue"
35
+
];
29
36
30
-
format = "xfs";
31
-
mountpoint = "/";
37
+
settings = {
38
+
crypttabExtraOpts = [
39
+
"tpm-device=auto"
40
+
"token-timeout=10"
41
+
];
42
+
};
43
+
44
+
content = {
45
+
type = "lvm_pv";
46
+
vg = "vg0";
47
+
};
32
48
};
33
49
};
50
+
};
51
+
};
52
+
};
53
+
};
54
+
55
+
lvm_vg.vg0 = {
56
+
type = "lvm_vg";
57
+
58
+
lvs = {
59
+
root = {
60
+
name = "root";
61
+
size = "100%FREE";
62
+
63
+
content = {
64
+
type = "filesystem";
65
+
66
+
format = "xfs";
67
+
mountpoint = "/";
68
+
};
69
+
};
70
+
71
+
swap = {
72
+
size = "32G";
73
+
74
+
content = {
75
+
type = "swap";
34
76
};
35
77
};
36
78
};