diff --git a/hosts/server/hardware-configuration.nix b/hosts/server/hardware-configuration.nix index 37716e9..23f24c9 100644 --- a/hosts/server/hardware-configuration.nix +++ b/hosts/server/hardware-configuration.nix @@ -1,4 +1,7 @@ { lib, modulesPath, ... }: +let + getUUID = uuid: "/dev/disk/by-uuid/${uuid}"; +in { imports = [ (modulesPath + "/installer/scan/not-detected.nix") ]; hardware.cpu.intel.updateMicrocode = lib.mkDefault true; @@ -17,33 +20,22 @@ }; initrd = { secrets."/keyfile" = /etc/keyfile; - luks.devices = { - nvme = { - device = "/dev/disk/by-uuid/af72f45c-cf7c-4e7d-8eab-2a95ab754921"; - keyFile = "/keyfile"; - preLVM = true; + luks.devices = + let + decryptLuks = uuid: { + device = getUUID uuid; + keyFile = "/keyfile"; + preLVM = true; + }; + in + { + nvme = decryptLuks "af72f45c-cf7c-4e7d-8eab-2a95ab754921"; + disk1 = decryptLuks "a9b0f346-7e38-40a6-baf6-3ad80cafc842"; + disk2 = decryptLuks "0ed12b83-4c56-4ba8-b4ea-75a9e927d771"; + disk3 = decryptLuks "8cd728f6-0d5b-4cea-8f7d-01aad11192c1"; + disk4 = decryptLuks "7fcac808-491f-4846-a4a9-a34cc77cb43d"; + disk5 = decryptLuks "1d05cf50-0f5f-427a-b41f-fab0d11e85e9"; }; - disk1 = { - device = "/dev/disk/by-uuid/a9b0f346-7e38-40a6-baf6-3ad80cafc842"; - keyFile = "/keyfile"; - preLVM = true; - }; - disk2 = { - device = "/dev/disk/by-uuid/0ed12b83-4c56-4ba8-b4ea-75a9e927d771"; - keyFile = "/keyfile"; - preLVM = true; - }; - disk3 = { - device = "/dev/disk/by-uuid/8cd728f6-0d5b-4cea-8f7d-01aad11192c1"; - keyFile = "/keyfile"; - preLVM = true; - }; - disk4 = { - device = "/dev/disk/by-uuid/7fcac808-491f-4846-a4a9-a34cc77cb43d"; - keyFile = "/keyfile"; - preLVM = true; - }; - }; }; kernelModules = [ "kvm-intel" ]; kernel.sysctl."vm.swappiness" = 80;