massive refactoring

This commit is contained in:
yaroslav
2026-05-09 16:17:24 +03:00
parent fa9f084702
commit 79483c0b9b
26 changed files with 370 additions and 507 deletions
+49
View File
@@ -0,0 +1,49 @@
{...}:
{
boot.initrd.clevis = {
enable = true;
devices."luks-zroot".secretFile = ../../secrets/Ratchet/main.jwe;
devices."luks-swap".secretFile = ../../secrets/Ratchet/main.jwe;
};
boot.initrd.luks.devices = {
luks-zroot.device = "/dev/nvme0n1p2";
luks-swap.device = "/dev/nvme0n1p3";
};
boot.zfs.requestEncryptionCredentials = [ ];
swapDevices = [ { device = "/dev/mapper/luks-swap"; } ];
boot.kernel.sysctl."vm.swappiness" = 0;
fileSystems = {
"/" = {
device = "none";
fsType = "tmpfs";
options = ["defaults" "size=1G" "mode=755"];
};
"/nix" = {
device = "ratchet-zroot/system/nix";
fsType = "zfs";
};
"/home" = {
device = "ratchet-zroot/system/home";
fsType = "zfs";
};
"/boot" = {
device = "/dev/nvme0n1p1";
fsType = "vfat";
options = [ "fmask=0022" "dmask=0022" ];
};
"/home/yaroslav/tmp" = {
device = "none";
fsType = "tmpfs";
};
"/Volumes/Trash" = {
device = "aphelion:/Volumes/Trash";
options = ["x-mount.mkdir" "user" "rw" "noauto" ];
fsType = "nfs";
};
};
}