tweaked luks setting for ssd, fixed /boot perissions

This commit is contained in:
server 2024-10-18 19:38:57 +02:00
parent 63500d8dea
commit 1781bd41a2

View file

@ -15,6 +15,8 @@
boot.initrd.systemd.enable = true;
boot.initrd.luks.devices."root".device = "/dev/disk/by-uuid/db8a5cf9-c54b-4e6a-b3f9-e6323eb962a6";
# doubles SSD performance because r/w queue is unnecessary here
boot.initrd.luks.devices."root".bypassWorkqueues = true;
fileSystems."/" =
{ device = "/dev/mapper/vg-root";
@ -24,7 +26,7 @@
fileSystems."/boot" =
{ device = "/dev/disk/by-uuid/0374-0967";
fsType = "vfat";
options = [ "fmask=0022" "dmask=0022" ];
options = [ "fmask=0022" "dmask=0022" "umask=0077" ];
};
swapDevices =