diff options
Diffstat (limited to '')
-rw-r--r-- | hosts/vm/disks.nix | 45 | ||||
-rw-r--r-- | hosts/vm/hardware.nix | 46 |
2 files changed, 49 insertions, 42 deletions
diff --git a/hosts/vm/disks.nix b/hosts/vm/disks.nix new file mode 100644 index 0000000..cabed80 --- /dev/null +++ b/hosts/vm/disks.nix @@ -0,0 +1,45 @@ +{ config, lib, inputs, pkgs, modulesPath, ... }: +{ + fileSystems."/" = { + device = "none"; + fsType = "tmpfs"; + }; + + boot.initrd.luks.devices."encrypted_boot".device = "/dev/disk/by-partlabel/boot"; + + fileSystems."/boot" = { + device = "/dev/mapper/encrypted_boot"; + fsType = "vfat"; + }; + + fileSystems."/boot/efi" = { + device = "/dev/disk/by-partlabel/efi"; + fsType = "vfat"; + }; + + boot.initrd.luks.devices."encrypted_root".device = "/dev/disk/by-partlabel/root"; + + fileSystems."/nix" = { + device = "/dev/mapper/encrypted_root"; + fsType = "btrfs"; + options = [ "subvol=nix" "compress-force=zstd" "noatime" ]; + }; + + fileSystems."/persist" = { + device = "/dev/mapper/encrypted_root"; + fsType = "btrfs"; + neededForBoot = true; + options = [ "subvol=persist" "compress-force=zstd" "noatime" ]; + }; + + fileSystems."/home" = { + device = "/dev/mapper/encrypted_root"; + fsType = "btrfs"; + options = [ "subvol=home" "compress-force=zstd" ]; + }; + + swapDevices = [ ]; + + zramSwap.enable = true; + +} diff --git a/hosts/vm/hardware.nix b/hosts/vm/hardware.nix index facdb18..7b04d70 100644 --- a/hosts/vm/hardware.nix +++ b/hosts/vm/hardware.nix @@ -1,6 +1,8 @@ -{ config, lib, pkgs, modulesPath, ... }: +{ config, lib, inputs, pkgs, modulesPath, ... }: { - imports = [ ]; + imports = [ + ./disks.nix + ]; boot = { initrd = { @@ -13,46 +15,6 @@ kernelParams = [ "net.ifnames=0" "biosdevname=0" "mitigations=off" ]; }; - fileSystems."/" = { - device = "none"; - fsType = "tmpfs"; - }; - - boot.initrd.luks.devices."encrypted_boot".device = "/dev/disk/by-partlabel/boot"; - - fileSystems."/boot" = { - device = "/dev/mapper/encrypted_boot"; - fsType = "vfat"; - }; - - fileSystems."/boot/efi" = { - device = "/dev/disk/by-partlabel/efi"; - fsType = "vfat"; - }; - - boot.initrd.luks.devices."encrypted_root".device = "/dev/disk/by-partlabel/root"; - - fileSystems."/nix" = { - device = "/dev/mapper/encrypted_root"; - fsType = "btrfs"; - options = [ "subvol=nix" "compress-force=zstd" "noatime" ]; - }; - - fileSystems."/persist" = { - device = "/dev/mapper/encrypted_root"; - fsType = "btrfs"; - neededForBoot = true; - options = [ "subvol=persist" "compress-force=zstd" "noatime" ]; - }; - - fileSystems."/home" = { - device = "/dev/mapper/encrypted_root"; - fsType = "btrfs"; - options = [ "subvol=home" "compress-force=zstd" ]; - }; - - swapDevices = [ ]; - services.xserver = { # Enable touchpad support (enabled default in most desktopManager). libinput.enable = true; |