From ce416956c65c8ff0c4c8d389b0b52b247a7a40d0 Mon Sep 17 00:00:00 2001
From: Christoph Cullmann <christoph@cullmann.io>
Date: Tue, 20 Aug 2024 20:31:58 +0200
Subject: beta install synced

---
 beta/hardware-configuration.nix | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

(limited to 'beta/hardware-configuration.nix')

diff --git a/beta/hardware-configuration.nix b/beta/hardware-configuration.nix
index 5a93531..4f4155d 100644
--- a/beta/hardware-configuration.nix
+++ b/beta/hardware-configuration.nix
@@ -10,10 +10,19 @@
   boot.initrd.kernelModules = [ "amdgpu" ];
   boot.kernelModules = [ "kvm-amd" ];
 
-  # efi partition
+  # /boot efi partition to boot in UEFI mode
   fileSystems."/boot" =
     { device = "/dev/disk/by-id/nvme-SAMSUNG_MZVLB1T0HBLR-000L2_S4DZNX0R362286-part1";
       fsType = "vfat";
+      options = [ "fmask=0022" "dmask=0022" ];
+      neededForBoot = true;
+    };
+
+  # /nix encrypted btrfs for the remaining space
+  boot.initrd.luks.devices."crypt0".device = "/dev/disk/by-id/nvme-SAMSUNG_MZVLB1T0HBLR-000L2_S4DZNX0R362286-part2";
+  fileSystems."/nix" =
+    { device = "/dev/mapper/crypt0";
+      fsType = "btrfs";
       neededForBoot = true;
     };
 
-- 
cgit v1.2.3