diff options
| author | Tim Keller <tjk@tjkeller.xyz> | 2026-08-24 18:11:45 -0500 |
|---|---|---|
| committer | Tim Keller <tjk@tjkeller.xyz> | 2026-08-24 18:11:45 -0500 |
| commit | b691b0faa814dcaef4ef6b6c709a73ae4b232e7f (patch) | |
| tree | 69fffcd7ef46a78644a1bec5c1957495e5985390 /hosts/poweredge-pro/key.nix | |
| parent | 1c9ffed96c3d348eb2db3d03c420e6c79ec16220 (diff) | |
| download | nixos-b691b0faa814dcaef4ef6b6c709a73ae4b232e7f.tar.xz nixos-b691b0faa814dcaef4ef6b6c709a73ae4b232e7f.zip | |
Diffstat (limited to 'hosts/poweredge-pro/key.nix')
| -rw-r--r-- | hosts/poweredge-pro/key.nix | 23 |
1 files changed, 23 insertions, 0 deletions
diff --git a/hosts/poweredge-pro/key.nix b/hosts/poweredge-pro/key.nix new file mode 100644 index 0000000..f5074f2 --- /dev/null +++ b/hosts/poweredge-pro/key.nix @@ -0,0 +1,23 @@ +{ + # Nixos root + boot.initrd.systemd.enable = true; # Default since 26.05 + boot.initrd.supportedFilesystems.ext4 = true; + + boot.initrd.systemd.mounts = [{ + what = "/dev/disk/by-label/key"; + where = "/key"; + type = "ext4"; + options = "ro"; + unitConfig.DefaultDependencies = "no"; + before = [ "zfs-import-nixos.service" ]; + requiredBy = [ "zfs-import-nixos.service" ]; + }]; + + # Storage + sops.secrets."zfs-key-storage" = { + sopsFile = ./resources/secrets/zfs-key.yaml; + key = "storage"; + path = "/etc/zfs/keys/storage.key"; + mode = "0400"; + }; +} |
