Compare commits

...

2 commits

Author SHA1 Message Date
server
6525287824 first working state \o/ 2024-10-16 22:19:53 +02:00
server
c173ba1404 snapshot 2024-10-16 18:06:17 +00:00
2 changed files with 16 additions and 19 deletions

View file

@ -18,30 +18,27 @@
system.stateVersion = "24.05";
# FDE stuff
boot.kernelParams = [ "ip=dhcp" ];
boot.loader.timeout = 2;
networking.useDHCP = true;
boot.initrd = {
availableKernelModules = [ "virtio-pci" ];
availableKernelModules = [ "r8169" ];
systemd.users.root.shell = "/bin/systemd-tty-ask-password-agent";
secrets = {"/root/initrd-ssh-key" = "/root/initrd-ssh-key";};
network = {
udhcpc.enable = true;
flushBeforeStage2 = true;
enable = true;
ssh = {
enable = true;
port = 2222;
hostKeys = [ /boot/initrd/ssh_host_rsa_key ];
hostKeys = [ /root/initrd-ssh-key ];
# this includes the ssh keys of all users in the wheel group, but you can just specify some keys manually
# authorizedKeys = [ "ssh-rsa ..." ];
authorizedKeys = with lib; concatLists (mapAttrsToList (name: user: if elem "wheel" user.extraGroups then user.openssh.authorizedKeys.keys else []) config.users.users);
};
postCommands = ''
echo 'cryptsetup-askpass' >> /root/.profile
'';
#postCommands = ''
# echo 'cryptsetup-askpass' >> /root/.profile
#'';
};
}
}
};
}

View file

@ -14,10 +14,10 @@
boot.extraModulePackages = [ ];
boot.initrd.systemd.enable = true;
#boot.initrd.luks.devices."root".device = "/dev/disk/by-uuid/db8a5cf9-c54b-4e6a-b3f9-e6323eb962a6";
boot.initrd.luks.devices."root".device = "/dev/disk/by-uuid/db8a5cf9-c54b-4e6a-b3f9-e6323eb962a6";
fileSystems."/" =
{ device = "/dev/disk/by-uuid/4f7afb2d-a730-4a0c-a9e4-92d75ebd1540";
{ device = "/dev/mapper/vg-root";
fsType = "btrfs";
};
@ -28,7 +28,7 @@
};
swapDevices =
[ { device = "/dev/disk/by-uuid/539bfdd3-6f33-4206-aa4d-7d06f3f91568"; }
[ { device = "/dev/mapper/vg-swap"; }
];
# Enables DHCP on each ethernet and wireless interface. In case of scripted networking
@ -40,4 +40,4 @@
nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
}
}