Compare commits
No commits in common. "98e93cd02012f706307a08a90a607c99c4cc6870" and "28b7f5550aee5ca712b34f810bffd1dab07eff9a" have entirely different histories.
98e93cd020
...
28b7f5550a
2 changed files with 22 additions and 44 deletions
|
|
@ -3,22 +3,7 @@
|
||||||
{
|
{
|
||||||
boot.initrd = {
|
boot.initrd = {
|
||||||
supportedFilesystems = [ "ext4" "zfs" ];
|
supportedFilesystems = [ "ext4" "zfs" ];
|
||||||
systemd = {
|
systemd.enable = true;
|
||||||
enable = true;
|
|
||||||
fido2.enable = true;
|
|
||||||
mounts = [
|
|
||||||
{
|
|
||||||
what = "/sysroot/keys";
|
|
||||||
where = "/keys";
|
|
||||||
type = "none";
|
|
||||||
options = "bind";
|
|
||||||
unitConfig.RequiresMountsFor = "/sysroot/keys";
|
|
||||||
requires = [ "sysroot-keys.mount" ];
|
|
||||||
after = [ "sysroot-keys.mount" ];
|
|
||||||
before = [ "zfs-import-nix-root.service" ];
|
|
||||||
}
|
|
||||||
];
|
|
||||||
};
|
|
||||||
luks.fido2Support = false;
|
luks.fido2Support = false;
|
||||||
|
|
||||||
luks.devices."zfs-keys" = {
|
luks.devices."zfs-keys" = {
|
||||||
|
|
@ -26,18 +11,18 @@
|
||||||
crypttabExtraOpts = [ "fido2-device=auto" ];
|
crypttabExtraOpts = [ "fido2-device=auto" ];
|
||||||
};
|
};
|
||||||
|
|
||||||
|
fileSystems."/keys" = {
|
||||||
|
device = "/dev/mapper/zfs-keys";
|
||||||
|
fsType = "ext4";
|
||||||
|
neededForBoot = true;
|
||||||
|
};
|
||||||
|
|
||||||
systemd.services."zfs-import-nix-root" = {
|
systemd.services."zfs-import-nix-root" = {
|
||||||
wants = [ "keys.mount" ];
|
wants = [ "keys.mount" ];
|
||||||
after = [ "keys.mount" ];
|
after = [ "keys.mount" ];
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
fileSystems."/keys" = {
|
|
||||||
device = "/dev/mapper/zfs-keys";
|
|
||||||
fsType = "ext4";
|
|
||||||
neededForBoot = true;
|
|
||||||
};
|
|
||||||
|
|
||||||
boot.zfs.forceImportRoot = false;
|
boot.zfs.forceImportRoot = false;
|
||||||
fileSystems."/" = {
|
fileSystems."/" = {
|
||||||
device = "nix-root/root";
|
device = "nix-root/root";
|
||||||
|
|
@ -65,11 +50,6 @@
|
||||||
options = [ "fmask=0022" "dmask=0022" ];
|
options = [ "fmask=0022" "dmask=0022" ];
|
||||||
};
|
};
|
||||||
|
|
||||||
swapDevices = [
|
swapDevices = [ { device = "/dev/disk/by-id/nvme-CT1000P2SSD8_2138E5D5DA5A-part3"; } ];
|
||||||
{
|
|
||||||
device = "/dev/disk/by-id/nvme-CT1000P2SSD8_2138E5D5DA5A-part3";
|
|
||||||
randomEncryption.enable = true;
|
|
||||||
}
|
|
||||||
];
|
|
||||||
|
|
||||||
}
|
}
|
||||||
|
|
@ -3,22 +3,20 @@
|
||||||
{
|
{
|
||||||
# Home Manager needs a bit of information about you and the
|
# Home Manager needs a bit of information about you and the
|
||||||
# paths it should manage.
|
# paths it should manage.
|
||||||
home = {
|
home.username = "nyxerinys";
|
||||||
username = "nyxerinys";
|
home.homeDirectory = (
|
||||||
homeDirectory = (
|
if osConfig.nyxs-nix.services.home.isMacOS then
|
||||||
if osConfig.nyxs-nix.services.home.isMacOS then
|
"/Users/nyxerinys"
|
||||||
"/Users/nyxerinys"
|
else
|
||||||
else
|
"/home/nyxerinys"
|
||||||
"/home/nyxerinys"
|
);
|
||||||
);
|
home.packages = with pkgs; [
|
||||||
packages = with pkgs; [
|
prismlauncher
|
||||||
prismlauncher
|
sops
|
||||||
sops
|
age
|
||||||
age
|
ssh-to-age
|
||||||
ssh-to-age
|
tmux
|
||||||
tmux
|
];
|
||||||
];
|
|
||||||
};
|
|
||||||
|
|
||||||
|
|
||||||
# This value determines the Home Manager release that your
|
# This value determines the Home Manager release that your
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue