moved key to initramfs

2024-09-18 00:31:50 -06:00
parent f09d882d7d
commit 77ec2f10ad
3 changed files with 48 additions and 40 deletions
--- a/hosts/miniserver/hardware-configuration.nix
+++ b/hosts/miniserver/hardware-configuration.nix
@@ -29,13 +29,14 @@
        enableCryptodisk = true;
      };
    };
-    initrd.luks.devices.nvme = {
-      device = "/dev/disk/by-uuid/30fd7d86-9bed-42a6-8a4e-a2ddb0031233";
-      keyFile = "/boot/keyfile";
-      preLVM = true;
-    };
    extraModulePackages = [ ];
    initrd = {
+      secrets."/keyfile" = /etc/keyfile;
+      luks.devices.nvme = {
+        device = "/dev/disk/by-uuid/30fd7d86-9bed-42a6-8a4e-a2ddb0031233";
+        keyFile = "keyfile";
+        preLVM = true;
+      };
      availableKernelModules = [
        "xhci_pci"
        "ahci"