jawz/NixOS
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

encrypting drives

Browse Source
This commit is contained in:
Danilo Reyes 2025-08-20 14:28:57 -06:00
parent f6c2d30992
commit c1ec0f5e1d
2 changed files with 8 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
hosts/server/hardware-configuration.nix
View File

@ -16,35 +16,31 @@
}; };
}; };
initrd = { initrd = {
secrets."/keyfile" = /etc/keyfile; # secrets."/keyfile" = /etc/keyfile;
luks.devices = { luks.devices = {
nvme = { nvme = {
device = "/dev/disk/by-uuid/af72f45c-cf7c-4e7d-8eab-2a95ab754921"; device = "/dev/disk/by-uuid/af72f45c-cf7c-4e7d-8eab-2a95ab754921";
keyFile = "/keyfile"; # keyFile = "/keyfile";
preLVM = true; preLVM = true;
}; };
# WHEN MIGRATING THE DISKS
# remember to delete this keyfile
# and replace it with the one on miniserver
# or move the keyfile
disk1 = { disk1 = {
device = "/dev/disk/by-uuid/a9b0f346-7e38-40a6-baf6-3ad80cafc842"; device = "/dev/disk/by-uuid/a9b0f346-7e38-40a6-baf6-3ad80cafc842";
keyFile = "/keyfile"; # keyFile = "/keyfile";
preLVM = true; preLVM = true;
}; };
disk2 = { disk2 = {
device = "/dev/disk/by-uuid/0ed12b83-4c56-4ba8-b4ea-75a9e927d771"; device = "/dev/disk/by-uuid/0ed12b83-4c56-4ba8-b4ea-75a9e927d771";
keyFile = "/keyfile"; # keyFile = "/keyfile";
preLVM = true; preLVM = true;
}; };
disk3 = { disk3 = {
device = "/dev/disk/by-uuid/8cd728f6-0d5b-4cea-8f7d-01aad11192c1"; device = "/dev/disk/by-uuid/8cd728f6-0d5b-4cea-8f7d-01aad11192c1";
keyFile = "/keyfile"; # keyFile = "/keyfile";
preLVM = true; preLVM = true;
}; };
disk4 = { disk4 = {
device = "/dev/disk/by-uuid/7fcac808-491f-4846-a4a9-a34cc77cb43d"; device = "/dev/disk/by-uuid/7fcac808-491f-4846-a4a9-a34cc77cb43d";
keyFile = "/keyfile"; # keyFile = "/keyfile";
preLVM = true; preLVM = true;
}; };
}; };

4
hosts/workstation/hardware-configuration.nix
View File

@ -75,7 +75,7 @@ in
}; };
initrd = { initrd = {
verbose = false; verbose = false;
secrets."/keyfile" = /etc/keyfile; # secrets."/keyfile" = /etc/keyfile;
availableKernelModules = [ availableKernelModules = [
"xhci_pci" "xhci_pci"
"ahci" "ahci"
@ -88,7 +88,7 @@ in
let let
decryptLuks = uuid: { decryptLuks = uuid: {
device = getUUID uuid; device = getUUID uuid;
keyFile = "/keyfile"; # keyFile = "/keyfile";
preLVM = true; preLVM = true;
}; };
in in