Split off disk encryption.

2023-06-30 10:35:34 +01:00
parent 969f173f5c
commit 329fafc3fc
2 changed files with 10 additions and 8 deletions
--- a/hosts/common/compute-node.nix
+++ b/hosts/common/compute-node.nix
@@ -4,16 +4,9 @@
    ./impermanence.nix
    ./sshd.nix
    ./user-ppetru.nix
+    ./unattended-encryption.nix
  ];

-  boot.initrd.kernelModules = [ "usb_storage" ];
-  boot.initrd.luks.devices."luksroot" = {
-      allowDiscards = true;
-      bypassWorkqueues = true;
-      keyFileSize = 4096;
-      keyFile = "/dev/sda";
-  };
-
  # Use the systemd-boot EFI boot loader.
  boot.loader.systemd-boot.enable = true;
  boot.loader.efi.canTouchEfiVariables = true;