added clevis

hosts/Aphelion/hardware-Aphelion.nix

@@ -15,6 +15,12 @@
   boot.supportedFilesystems = [ "zfs" ];
   boot.kernelPackages = pkgs.linuxPackages_latest;
   boot.zfs.package = pkgs.zfs_2_4;
+
+  boot.initrd.clevis = {
+    enable = true;
+    devices."aphelion-zroot/data/sensitive".secretFile = ../../secrets/Aphelion/sensitive.jwe;
+    devices."aphelion-zroot/nix-enc".secretFile = ../../secrets/Aphelion/sensitive.jwe;
+  };
   fileSystems."/" =
     { device = "none";
     fsType = "tmpfs";
@@ -28,7 +34,7 @@
     };
 
   fileSystems."/nix" =
-    { device = "aphelion-zroot/nix";
+    { device = "aphelion-zroot/nix-enc";
       fsType = "zfs";
     };
 
@@ -52,6 +58,12 @@
         fsType = "ext4";
         options = [ "x-mount.mkdir" "rw" ];
       };
+    fileSystems."/Volumes/Sensitive" =
+      {
+        device = "aphelion-zroot/data/sensitive";
+        fsType = "zfs";
+        options = [ "x-mount.mkdir" "rw" ];
+      };
 #    fileSystems."/Volumes/ssd_g" =
 #      {
 #        device = "/dev/disk/by-id/ata-KINGSTON_SA400S37240G_50026B77846D940A-part1";