probe encryption

This commit is contained in:
Ingolf Wagner 2024-08-07 11:07:10 +02:00
parent 36fc0508b0
commit 1b60bfbe21
No known key found for this signature in database
GPG key ID: 76BF5F1928B9618B
5 changed files with 48 additions and 4 deletions

View file

@ -477,7 +477,7 @@
probe = clanSetup { probe = clanSetup {
name = "probe"; name = "probe";
host = "probe.bear"; host = "95.217.18.54";
modules = [ modules = [
homeManagerModules homeManagerModules
stylixModules stylixModules

View file

@ -10,6 +10,9 @@
components.mainUser.enable = true; components.mainUser.enable = true;
components.network.enable = true; components.network.enable = true;
components.nixos.boot.enable = true;
components.nixos.boot.tor.enable = false;
networking.hostName = "probe"; networking.hostName = "probe";
users.users.root.openssh.authorizedKeys.keys = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJkqVvuJSvRMO5pG2CHNNBxjB7HlJudK4TQs3BhbOWOD" ]; users.users.root.openssh.authorizedKeys.keys = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJkqVvuJSvRMO5pG2CHNNBxjB7HlJudK4TQs3BhbOWOD" ];
users.users.root.initialPassword = "admin"; users.users.root.initialPassword = "admin";

View file

@ -1,13 +1,11 @@
{ config, factsGenerator, clanLib, ... }: { config, factsGenerator, clanLib, ... }:
{ {
imports = [ imports = [
./disko-config.nix ./disko-config-encrypted.nix
./hardware-configuration.nix ./hardware-configuration.nix
./hetzner.nix # to more me to components ./hetzner.nix # to more me to components
]; ];
boot.tmp.useTmpfs = true; # make /tmp a tmpfs (performance!) boot.tmp.useTmpfs = true; # make /tmp a tmpfs (performance!)
} }

View file

@ -0,0 +1,43 @@
# Example to create a bios compatible gpt partition
{ lib, ... }:
{
disko.devices = {
disk.disk1 = {
device = lib.mkDefault "/dev/sda";
type = "disk";
content = {
type = "gpt";
partitions = {
boot = {
name = "boot";
size = "1M";
type = "EF02";
};
esp = {
name = "ESP";
size = "500M";
type = "EF00";
content = {
type = "filesystem";
format = "vfat";
mountpoint = "/boot";
};
};
root = {
name = "root";
size = "100%";
content = {
type = "luks";
name = "root";
content = {
type = "filesystem";
format = "ext4";
mountpoint = "/";
};
};
};
};
};
};
};
}