summaryrefslogtreecommitdiff
path: root/hosts/poweredge-pro/key.nix
diff options
context:
space:
mode:
authorTim Keller <tjk@tjkeller.xyz>2026-08-24 18:11:45 -0500
committerTim Keller <tjk@tjkeller.xyz>2026-08-24 18:11:45 -0500
commitb691b0faa814dcaef4ef6b6c709a73ae4b232e7f (patch)
tree69fffcd7ef46a78644a1bec5c1957495e5985390 /hosts/poweredge-pro/key.nix
parent1c9ffed96c3d348eb2db3d03c420e6c79ec16220 (diff)
downloadnixos-b691b0faa814dcaef4ef6b6c709a73ae4b232e7f.tar.xz
nixos-b691b0faa814dcaef4ef6b6c709a73ae4b232e7f.zip
poweredge-pro initial configHEADmaster
Diffstat (limited to 'hosts/poweredge-pro/key.nix')
-rw-r--r--hosts/poweredge-pro/key.nix23
1 files changed, 23 insertions, 0 deletions
diff --git a/hosts/poweredge-pro/key.nix b/hosts/poweredge-pro/key.nix
new file mode 100644
index 0000000..f5074f2
--- /dev/null
+++ b/hosts/poweredge-pro/key.nix
@@ -0,0 +1,23 @@
+{
+ # Nixos root
+ boot.initrd.systemd.enable = true; # Default since 26.05
+ boot.initrd.supportedFilesystems.ext4 = true;
+
+ boot.initrd.systemd.mounts = [{
+ what = "/dev/disk/by-label/key";
+ where = "/key";
+ type = "ext4";
+ options = "ro";
+ unitConfig.DefaultDependencies = "no";
+ before = [ "zfs-import-nixos.service" ];
+ requiredBy = [ "zfs-import-nixos.service" ];
+ }];
+
+ # Storage
+ sops.secrets."zfs-key-storage" = {
+ sopsFile = ./resources/secrets/zfs-key.yaml;
+ key = "storage";
+ path = "/etc/zfs/keys/storage.key";
+ mode = "0400";
+ };
+}