moved key to initramfs

2024-09-18 00:31:50 -06:00
parent f09d882d7d
commit 77ec2f10ad
3 changed files with 48 additions and 40 deletions
--- a/hosts/workstation/hardware-configuration.nix
+++ b/hosts/workstation/hardware-configuration.nix
@@ -43,13 +43,16 @@
        '';
      };
    };
-    initrd.luks.devices.nvme = {
-      device = "/dev/disk/by-uuid/e9618e85-a631-4374-b2a4-22c376d6e41b";
-      keyFile = "/boot/keyfile";
-      preLVM = true;
+    initrd = {
+      secrets."/keyfile" = /etc/keyfile;
+      availableKernelModules =
+        [ "xhci_pci" "ahci" "usbhid" "nvme" "usb_storage" "sd_mod" ];
+      luks.devices.nvme = {
+        device = "/dev/disk/by-uuid/e9618e85-a631-4374-b2a4-22c376d6e41b";
+        keyFile = "/keyfile";
+        preLVM = true;
+      };
    };
-    initrd.availableKernelModules =
-      [ "xhci_pci" "ahci" "usbhid" "nvme" "usb_storage" "sd_mod" ];
  };
  fileSystems = let
    nfsMount = server: nfsDisk: {