summaryrefslogtreecommitdiff
path: root/machines/firelink.nix
diff options
context:
space:
mode:
authorKjetil Orbekk <kj@orbekk.com>2021-07-12 09:14:36 -0400
committerKjetil Orbekk <kj@orbekk.com>2021-07-12 09:14:36 -0400
commitb4d9ba419a430d0162ec19eb426f2b3f9a5aae0e (patch)
treee3b966e8ad1c76acc73f8a6169f5e67cb08e47e9 /machines/firelink.nix
parent4747e07a30d53516c85967a2e485a1735c1d5694 (diff)
allow unattended boot firelink
Diffstat (limited to 'machines/firelink.nix')
-rw-r--r--machines/firelink.nix12
1 files changed, 8 insertions, 4 deletions
diff --git a/machines/firelink.nix b/machines/firelink.nix
index 4f23835..7673c21 100644
--- a/machines/firelink.nix
+++ b/machines/firelink.nix
@@ -133,7 +133,7 @@ in {
console.earlySetup = true;
boot.loader.grub.enable = true;
- boot.loader.grub.devices = ["nodev"];
+ boot.loader.grub.devices = [ "nodev" ];
boot.loader.grub.efiSupport = true;
boot.loader.efi.canTouchEfiVariables = true;
# boot.loader.grub.efiInstallAsRemovable = true;
@@ -210,9 +210,13 @@ in {
options = [ "noatime" "discard" ];
};
- boot.initrd.luks.devices."cryptsystem".device =
- "/dev/disk/by-uuid/8acc11c2-e540-4561-8c88-34176fca1a72";
- boot.initrd.luks.devices."cryptsystem".allowDiscards = true;
+ boot.initrd.luks.devices."cryptsystem" = {
+ device = "/dev/disk/by-uuid/8acc11c2-e540-4561-8c88-34176fca1a72";
+ allowDiscards = true;
+ keyFile = "/dev/zero";
+ keyFileSize = 32;
+ fallbackToPassword = true;
+ };
fileSystems."/boot" = {
device = "/dev/disk/by-uuid/C636-D264";