traxys/Nixfiles
1
0
Fork 0
mirror of https://github.com/traxys/Nixfiles.git synced 2026-03-23 12:37:15 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

hostconfig/gandalf: Encrypt swap

Browse source
This commit is contained in:
Quentin Boyer 2024-08-29 00:18:53 +02:00
parent 361ed42289
commit 091ff933a2
2 changed files with 15 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

4
hostconfig/gandalf/hardware-configuration.nix
View file

@ -27,10 +27,6 @@
options = [ "fmask=0022" "dmask=0022" ];
};
swapDevices =
[ { device = "/dev/disk/by-uuid/6993932f-5b29-4207-915a-2f185ec9f485"; }
];
# Enables DHCP on each ethernet and wireless interface. In case of scripted networking
# (the default) this is the recommended approach. When using systemd-networkd it's
# still possible to use this option, but it's recommended to use it in conjunction

16
hostconfig/gandalf/nixos.nix
View file

@ -1,17 +1,31 @@
{ pkgs, ... }:
let
swap = "/dev/disk/by-uuid/66d89c4f-6d79-4bb5-8d83-d53ea07a5fb0";
in
{
boot.loader.systemd-boot.enable = true;
boot.loader.efi.canTouchEfiVariables = true;
boot.kernelParams = [ "amd_pstate=active" ];
boot.kernelPackages = pkgs.linuxPackages_latest;
boot.resumeDevice = "/dev/disk/by-uuid/6993932f-5b29-4207-915a-2f185ec9f485";
boot.resumeDevice = swap;
services.logind.lidSwitch = "suspend-then-hibernate";
systemd.sleep.extraConfig = ''
HibernateDelaySec=1h
'';
swapDevices = [
{
device = swap;
encrypted = {
enable = true;
label = "swap-dev";
blkDev = "/dev/disk/by-uuid/54642cf7-2f34-4a75-9a6b-82a0df72d2bb";
};
}
];
powerManagement = {
enable = true;
powertop.enable = true;