snapshot

hosts/supernova/default.nix

@@ -18,30 +18,32 @@
   system.stateVersion = "24.05"; 
 
   # FDE stuff
-  
+  networking.firewall.allowedTCPPorts = [ 2222 ];
+  systemd.services.sshd.wantedBy = [ "cryptsetup.target" ];
+  networking.useDHCP = true;
   boot.initrd = {
     availableKernelModules = [ "virtio-pci" ];
     secrets = {"/root/initrd-ssh-key" = "/root/initrd-ssh-key";};
     network = {
 
-    udhcpc.enable = true;
-    flushBeforeStage2 = true;
+    #udhcpc.enable = true;
+    #flushBeforeStage2 = true;
 
 
     enable = true;
     ssh = {
       enable = true;
       port = 2222;
-      hostKeys = [ /boot/initrd/ssh_host_rsa_key ];
+      hostKeys = [ /root/initrd-ssh-key ];
       # this includes the ssh keys of all users in the wheel group, but you can just specify some keys manually
       # authorizedKeys = [ "ssh-rsa ..." ];
       authorizedKeys = with lib; concatLists (mapAttrsToList (name: user: if elem "wheel" user.extraGroups then user.openssh.authorizedKeys.keys else []) config.users.users);
     };
-    postCommands = ''
-      echo 'cryptsetup-askpass' >> /root/.profile
-    '';
+    #postCommands = ''
+    #  echo 'cryptsetup-askpass' >> /root/.profile
+    #'';
+  };
   };
-  }
   
   
 }

hosts/supernova/hardware-configuration.nix

@@ -14,7 +14,7 @@
   boot.extraModulePackages = [ ];
 
   boot.initrd.systemd.enable = true;
-  #boot.initrd.luks.devices."root".device = "/dev/disk/by-uuid/db8a5cf9-c54b-4e6a-b3f9-e6323eb962a6";
+  boot.initrd.luks.devices."root".device = "/dev/disk/by-uuid/db8a5cf9-c54b-4e6a-b3f9-e6323eb962a6";
 
   fileSystems."/" =
     { device = "/dev/disk/by-uuid/4f7afb2d-a730-4a0c-a9e4-92d75ebd1540";