probe encryption

flake.nix

@@ -477,7 +477,7 @@
 
           probe = clanSetup {
             name = "probe";
-            host = "probe.bear";
+            host = "95.217.18.54";
             modules = [
               homeManagerModules
               stylixModules

machines/probe/configuration.nix

@@ -10,6 +10,9 @@
   components.mainUser.enable = true;
   components.network.enable = true;
 
+  components.nixos.boot.enable = true;
+  components.nixos.boot.tor.enable = false;
+
   networking.hostName = "probe";
   users.users.root.openssh.authorizedKeys.keys = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJkqVvuJSvRMO5pG2CHNNBxjB7HlJudK4TQs3BhbOWOD" ];
   users.users.root.initialPassword = "admin";

machines/probe/hardware-configuration/default.nix

@@ -1,13 +1,11 @@
 { config, factsGenerator, clanLib, ... }:
 {
   imports = [
-    ./disko-config.nix
+    ./disko-config-encrypted.nix
     ./hardware-configuration.nix
     ./hetzner.nix # to more me to components
   ];
 
   boot.tmp.useTmpfs = true; # make /tmp a tmpfs (performance!)
 
-
-
 }

machines/probe/hardware-configuration/disko-config-encrypted.nix

@@ -0,0 +1,43 @@
+# Example to create a bios compatible gpt partition
+{ lib, ... }:
+{
+  disko.devices = {
+    disk.disk1 = {
+      device = lib.mkDefault "/dev/sda";
+      type = "disk";
+      content = {
+        type = "gpt";
+        partitions = {
+          boot = {
+            name = "boot";
+            size = "1M";
+            type = "EF02";
+          };
+          esp = {
+            name = "ESP";
+            size = "500M";
+            type = "EF00";
+            content = {
+              type = "filesystem";
+              format = "vfat";
+              mountpoint = "/boot";
+            };
+          };
+          root = {
+            name = "root";
+            size = "100%";
+            content = {
+              type = "luks";
+              name = "root";
+              content = {
+                type = "filesystem";
+                format = "ext4";
+                mountpoint = "/";
+              };
+            };
+          };
+        };
+      };
+    };
+  };
+}