diff --git a/hosts/Ratchet/hardware-Ratchet.nix b/hosts/Ratchet/hardware-Ratchet.nix index d0a21e8..0d7d19f 100644 --- a/hosts/Ratchet/hardware-Ratchet.nix +++ b/hosts/Ratchet/hardware-Ratchet.nix @@ -14,18 +14,28 @@ boot.extraModulePackages = [ ]; boot.extraModprobeConfig = "options kvm_amd nested=1"; + boot.initrd.clevis = { + enable = true; + devices."luks-zroot".secretFile = ../../secrets/Ratchet/main.jwe; + devices."luks-swap".secretFile = ../../secrets/Ratchet/main.jwe; + }; + + boot.initrd.luks.devices = { + luks-zroot.device = "/dev/nvme0n1p2"; + luks-swap.device = "/dev/nvme0n1p3"; + }; fileSystems."/" = { device = "none"; fsType = "tmpfs"; options = ["defaults" "size=1G" "mode=755"]; }; fileSystems."/nix" = - { device = "ratchet-zfs/root/nix"; + { device = "ratchet-zroot/system/nix"; fsType = "zfs"; }; fileSystems."/home" = - { device = "ratchet-zfs/root/home"; + { device = "ratchet-zroot/system/home"; fsType = "zfs"; }; diff --git a/secrets/Ratchet/main.jwe b/secrets/Ratchet/main.jwe new file mode 100644 index 0000000..c27ae8f --- /dev/null +++ b/secrets/Ratchet/main.jwe @@ -0,0 +1 @@ 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..j57z2RsOHQ9tTBa0.-GYNuTq9eXP7fOgXCn1ia8LG.0Pghun0zmm4z_7JCcUBE3g \ No newline at end of file