platform/user.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46

{
  config.local = {
    hostname = "user";
    portable = false;

    dhcpInterface = "ens8";

    canTouchEfiVariables = true;
    initrdModules = ,[ "xhci_pci" "ahci" "usb_storage" "uas" "sd_mod" "r8169" ];

    videoDrivers = [ "qxl" ];

    crypt = {
      toplevel = {
        device = "/dev/disk/by-path/virtio-pci-0000:00:05.0";
        target = "user";
        headerFromBoot = "headers/toplevel0-user.luks-header";
      };

      aux = [
        {
          device = "/dev/disk/by-path/virtio-pci-0000:00:0b.0";
          target = "user-hdd";
          header = "/var/trust/headers/hdd1-user.luks-header";
          keyfile = "/var/trust/cryptkeys/hdd1-user.luks-key";
        }
      ];
    };

    fs = {
      boot.device = "/dev/disk/by-uuid/";

      sys = {
        device = "/dev/mapper/user";
        ssd = true;
        root = "/root";
        toplevel = "/";
      };

      hdd = {
        device = "/dev/mapper/user-hdd";
        home = "/home";
      };
    };
  };
}