feature: data-drives on argon and boot securty #87

Merged
aaron merged 2 commits from feature/argon_drives into main 2026-10-03 10:57:34 +02:00
4 changed files with 7 additions and 7 deletions
Showing only changes of commit 4251ae2da5 - Show all commits
+1 -1
View File
@@ -75,7 +75,7 @@ fileSystems."/" =
fileSystems."/boot" = fileSystems."/boot" =
{ device = "/dev/disk/by-label/nixboot"; { device = "/dev/disk/by-label/nixboot";
fsType = "vfat"; fsType = "vfat";
options = [ "fmask=0022" "dmask=0022" ]; options = [ "fmask=0077" "dmask=0077" ]; # only root may read /boot
}; };
fileSystems."/home" = fileSystems."/home" =
{ device = "/dev/disk/by-label/nixhome"; { device = "/dev/disk/by-label/nixhome";
+2 -2
View File
@@ -39,8 +39,8 @@
device = "/dev/disk/by-label/nixboot"; device = "/dev/disk/by-label/nixboot";
fsType = "vfat"; fsType = "vfat";
options = [ options = [
"fmask=0022" "fmask=0077"
"dmask=0022" "dmask=0077"
]; ];
}; };
+2 -2
View File
@@ -40,8 +40,8 @@
device = "/dev/disk/by-label/nixboot"; device = "/dev/disk/by-label/nixboot";
fsType = "vfat"; fsType = "vfat";
options = [ options = [
"fmask=0022" "fmask=0077"
"dmask=0022" "dmask=0077"
]; ];
}; };
+2 -2
View File
@@ -43,8 +43,8 @@
device = "/dev/disk/by-label/nixboot"; device = "/dev/disk/by-label/nixboot";
fsType = "vfat"; fsType = "vfat";
options = [ options = [
"fmask=0022" "fmask=0077"
"dmask=0022" "dmask=0077"
]; ];
}; };