massive refactoring
This commit is contained in:
@@ -0,0 +1,49 @@
|
||||
{...}:
|
||||
{
|
||||
boot.initrd.clevis = {
|
||||
enable = true;
|
||||
devices."luks-zroot".secretFile = ../../secrets/Ratchet/main.jwe;
|
||||
devices."luks-swap".secretFile = ../../secrets/Ratchet/main.jwe;
|
||||
};
|
||||
|
||||
boot.initrd.luks.devices = {
|
||||
luks-zroot.device = "/dev/nvme0n1p2";
|
||||
luks-swap.device = "/dev/nvme0n1p3";
|
||||
};
|
||||
|
||||
boot.zfs.requestEncryptionCredentials = [ ];
|
||||
|
||||
swapDevices = [ { device = "/dev/mapper/luks-swap"; } ];
|
||||
boot.kernel.sysctl."vm.swappiness" = 0;
|
||||
|
||||
fileSystems = {
|
||||
"/" = {
|
||||
device = "none";
|
||||
fsType = "tmpfs";
|
||||
options = ["defaults" "size=1G" "mode=755"];
|
||||
};
|
||||
"/nix" = {
|
||||
device = "ratchet-zroot/system/nix";
|
||||
fsType = "zfs";
|
||||
};
|
||||
"/home" = {
|
||||
device = "ratchet-zroot/system/home";
|
||||
fsType = "zfs";
|
||||
};
|
||||
"/boot" = {
|
||||
device = "/dev/nvme0n1p1";
|
||||
fsType = "vfat";
|
||||
options = [ "fmask=0022" "dmask=0022" ];
|
||||
};
|
||||
"/home/yaroslav/tmp" = {
|
||||
device = "none";
|
||||
fsType = "tmpfs";
|
||||
};
|
||||
"/Volumes/Trash" = {
|
||||
device = "aphelion:/Volumes/Trash";
|
||||
options = ["x-mount.mkdir" "user" "rw" "noauto" ];
|
||||
fsType = "nfs";
|
||||
};
|
||||
};
|
||||
|
||||
}
|
||||
Reference in New Issue
Block a user