Encrypted swap

This commit is contained in:
Nathan McCarty 2025-03-27 01:41:39 -04:00
parent ae01142320
commit c739ecd895

View file

@ -1,11 +1,15 @@
# Do not modify this file! It was generated by nixos-generate-config
# and may be overwritten by future invocations. Please make changes
# to /etc/nixos/configuration.nix instead.
{ config, lib, pkgs, modulesPath, ... }:
{
imports =
[ (modulesPath + "/installer/scan/not-detected.nix")
config,
lib,
pkgs,
modulesPath,
...
}: {
imports = [
(modulesPath + "/installer/scan/not-detected.nix")
];
boot.initrd.availableKernelModules = ["xhci_pci" "ahci" "usbhid" "sd_mod"];
@ -13,44 +17,49 @@
boot.kernelModules = ["kvm-amd"];
boot.extraModulePackages = [];
fileSystems."/" =
{ device = "/dev/disk/by-uuid/e9e1adfb-feb9-4456-80a0-d8d306b36145";
fileSystems."/" = {
device = "/dev/disk/by-uuid/e9e1adfb-feb9-4456-80a0-d8d306b36145";
fsType = "btrfs";
options = ["subvol=root"];
};
fileSystems."/nix" =
{ device = "/dev/disk/by-uuid/e9e1adfb-feb9-4456-80a0-d8d306b36145";
fileSystems."/nix" = {
device = "/dev/disk/by-uuid/e9e1adfb-feb9-4456-80a0-d8d306b36145";
fsType = "btrfs";
options = ["subvol=nix"];
};
fileSystems."/var" =
{ device = "/dev/disk/by-uuid/e9e1adfb-feb9-4456-80a0-d8d306b36145";
fileSystems."/var" = {
device = "/dev/disk/by-uuid/e9e1adfb-feb9-4456-80a0-d8d306b36145";
fsType = "btrfs";
options = ["subvol=var"];
};
fileSystems."/home" =
{ device = "/dev/disk/by-uuid/e9e1adfb-feb9-4456-80a0-d8d306b36145";
fileSystems."/home" = {
device = "/dev/disk/by-uuid/e9e1adfb-feb9-4456-80a0-d8d306b36145";
fsType = "btrfs";
options = ["subvol=home"];
};
fileSystems."/etc" =
{ device = "/dev/disk/by-uuid/e9e1adfb-feb9-4456-80a0-d8d306b36145";
fileSystems."/etc" = {
device = "/dev/disk/by-uuid/e9e1adfb-feb9-4456-80a0-d8d306b36145";
fsType = "btrfs";
options = ["subvol=etc"];
};
fileSystems."/boot" =
{ device = "/dev/disk/by-uuid/DE13-B03B";
fileSystems."/boot" = {
device = "/dev/disk/by-uuid/DE13-B03B";
fsType = "vfat";
options = ["fmask=0022" "dmask=0022"];
};
swapDevices =
[ { device = "/dev/disk/by-uuid/fe4935bf-ae69-4529-87cd-1a913c346876"; }
swapDevices = [
{
device = "/dev/disk/by-partuuid/d2899053-892b-49b1-b9e9-55df9b635862";
randomEncryption = {
enable = true;
};
}
];
# Enables DHCP on each ethernet and wireless interface. In case of scripted networking