From b691b0faa814dcaef4ef6b6c709a73ae4b232e7f Mon Sep 17 00:00:00 2001
From: Tim Keller <tjk@tjkeller.xyz>
Date: Mon, 24 Aug 2026 18:11:45 -0500
Subject: poweredge-pro initial config

---
 hosts/poweredge-pro/key.nix | 23 +++++++++++++++++++++++
 1 file changed, 23 insertions(+)
 create mode 100644 hosts/poweredge-pro/key.nix

(limited to 'hosts/poweredge-pro/key.nix')

diff --git a/hosts/poweredge-pro/key.nix b/hosts/poweredge-pro/key.nix
new file mode 100644
index 0000000..f5074f2
--- /dev/null
+++ b/hosts/poweredge-pro/key.nix
@@ -0,0 +1,23 @@
+{
+	# Nixos root
+	boot.initrd.systemd.enable = true;  # Default since 26.05
+	boot.initrd.supportedFilesystems.ext4 = true;
+
+	boot.initrd.systemd.mounts = [{
+	  what = "/dev/disk/by-label/key";
+	  where = "/key";
+	  type = "ext4";
+	  options = "ro";
+	  unitConfig.DefaultDependencies = "no";
+	  before = [ "zfs-import-nixos.service" ];
+	  requiredBy = [ "zfs-import-nixos.service" ];
+	}];
+
+	# Storage
+	sops.secrets."zfs-key-storage" = {
+		sopsFile = ./resources/secrets/zfs-key.yaml;
+		key = "storage";
+		path = "/etc/zfs/keys/storage.key";
+		mode = "0400";
+	};
+}
-- 
cgit v1.2.3