alyraffauf/nixcfg
1
0
Fork 0
mirror of https://github.com/alyraffauf/nixcfg.git synced 2024-11-25 09:31:54 -05:00
Code Issues Actions 7 Packages Projects Releases Wiki Activity

mauville: enable secureboot and auto luks unlocking

Browse source
This commit is contained in:
Aly Raffauf 2024-08-24 14:36:25 -04:00
parent c850f1dfec
commit 78840bcb6f
1 changed files with 6 additions and 17 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

23
hosts/mauville/default.nix
View file

@ -33,28 +33,17 @@ in {
boot = { boot = {
initrd = { initrd = {
availableKernelModules = ["xhci_pci" "ahci" "nvme" "usbhid" "sd_mod" "r8169"]; availableKernelModules = ["xhci_pci" "ahci" "nvme" "usbhid" "sd_mod" "r8169"];
systemd.enable = true;
};
network = { lanzaboote = {
enable = true; enable = true;
flushBeforeStage2 = true; pkiBundle = "/etc/secureboot";
ssh = {
enable = true;
hostKeys = [/etc/secrets/initrd/ssh_host_ed25519_key];
};
udhcpc.enable = true;
postCommands = ''
# Automatically ask for the password on SSH login
echo 'cryptsetup-askpass || echo "Unlock was successful; exiting SSH session" && exit 1' >> /root/.profile
'';
};
}; };
loader = { loader = {
efi.canTouchEfiVariables = true; efi.canTouchEfiVariables = true;
systemd-boot.enable = true; systemd-boot.enable = lib.mkForce false;
}; };
}; };