aaron/nixconfig
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

refactor(drives): add disclaimer and change order

Browse Source
This commit is contained in:
aaron
2026-03-06 18:34:15 +01:00
parent bd6546263b
commit 9b02617698
1 changed files with 9 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
modules/nixos/drives.nix
View File

@@ -1,6 +1,15 @@
{ config, lib, pkgs, ... }: { config, lib, pkgs, ... }:
# Add encrypted drives to argon
{ {
# copy keyfiles into initrd to make them available during early boot
boot.initrd.secrets = {
"/etc/nixos/keys/data1.key" = "/etc/nixos/keys/data1.key";
"/etc/nixos/keys/data2.key" = "/etc/nixos/keys/data2.key";
"/etc/nixos/keys/nvmecache.key" = "/etc/nixos/keys/nvmecache.key";
};
# decrypt data drives with keyfiles for argon # decrypt data drives with keyfiles for argon
boot.initrd.luks.devices = { boot.initrd.luks.devices = {
"data1" = { "data1" = {
@@ -17,13 +26,6 @@
}; };
}; };
# copy keyfiles into initrd to make them available during early boot
boot.initrd.secrets = {
"/etc/nixos/keys/data1.key" = "/etc/nixos/keys/data1.key";
"/etc/nixos/keys/data2.key" = "/etc/nixos/keys/data2.key";
"/etc/nixos/keys/nvmecache.key" = "/etc/nixos/keys/nvmecache.key";
};
# mount decrypted filesystems # mount decrypted filesystems
fileSystems."/mnt/data1" = { fileSystems."/mnt/data1" = {
device = "/dev/mapper/data1"; device = "/dev/mapper/data1";