35 lines
No EOL
912 B
Nix
35 lines
No EOL
912 B
Nix
{
|
|
# boot.loader.grub.enable = true;
|
|
boot.loader.grub.enableCryptodisk = true;
|
|
# boot.initrd.luks.devices."crypted".device = "/dev/vda2";
|
|
|
|
# services.btrfs.autoScrub.enable = true;
|
|
# services.btrfs.autoScrub.interval = "weekly";
|
|
|
|
disko.devices.disk.vda = {
|
|
device = "/dev/vda";
|
|
type = "disk";
|
|
content = {
|
|
type = "gpt";
|
|
partitions = {
|
|
boot = {
|
|
size = "1M";
|
|
type = "EF02";
|
|
}; # partitions.boot
|
|
luks = {
|
|
size = "100%";
|
|
content = {
|
|
type = "luks";
|
|
name = "crypted";
|
|
extraOpenArgs = [ "--allow-discards" ];
|
|
content = {
|
|
type = "filesystem";
|
|
format = "ext4";
|
|
mountpoint = "/";
|
|
}; # content
|
|
}; # content
|
|
}; # luks.partitions
|
|
}; # partitions
|
|
}; # content
|
|
}; # disko.devices.disk.vda
|
|
} # root |