46 lines
992 B
Nix
46 lines
992 B
Nix
{ config, pkgs, lib, ... }:
|
|
|
|
{
|
|
imports =
|
|
[
|
|
./hardware-configuration.nix
|
|
];
|
|
|
|
# Use the systemd-boot EFI boot loader.
|
|
boot.loader.systemd-boot.enable = true;
|
|
boot.loader.efi.canTouchEfiVariables = true;
|
|
boot.loader.timeout = 0;
|
|
|
|
boot.initrd.luks = {
|
|
devices.lvm = {
|
|
device = "/dev/disk/by-uuid/43275d9a-8fe8-4631-bf9c-a95d692b534f";
|
|
bypassWorkqueues = true;
|
|
};
|
|
};
|
|
|
|
boot.initrd.network.enable = true;
|
|
boot.initrd.network.ssh = {
|
|
enable = true;
|
|
port = 1022;
|
|
shell = "/bin/cryptsetup-askpass";
|
|
authorizedKeys = config.users.users.clerie.openssh.authorizedKeys.keys;
|
|
hostKeys = [
|
|
"/var/src/secrets/initrd/ssh_host_ed25519_key"
|
|
];
|
|
};
|
|
boot.initrd.kernelModules = [ "igc" ];
|
|
boot.kernelParams = [ "ip=dhcp" ];
|
|
|
|
networking.hostName = "zinc";
|
|
|
|
services.wg-clerie = {
|
|
enable = true;
|
|
ipv6s = [ "2a01:4f8:c0c:15f1::8109/128" ];
|
|
ipv4s = [ "10.20.30.109/32" ];
|
|
};
|
|
|
|
system.stateVersion = "23.05";
|
|
}
|
|
|
|
|