Split off disk encryption.

2023-06-30 10:35:34 +01:00
parent 969f173f5c
commit 329fafc3fc
2 changed files with 10 additions and 8 deletions
--- a/hosts/common/unattended-encryption.nix
+++ b/hosts/common/unattended-encryption.nix
@@ -0,0 +1,9 @@
+{
+  boot.initrd.kernelModules = [ "usb_storage" ];
+  boot.initrd.luks.devices."luksroot" = {
+      allowDiscards = true;
+      bypassWorkqueues = true;
+      keyFileSize = 4096;
+      keyFile = "/dev/sda";
+  };
+}