From 0f04ebeab7291fb39bba83a031d777947a8b18fd Mon Sep 17 00:00:00 2001
From: Adrian Kummerlaender
Date: Mon, 7 May 2018 20:53:47 +0200
Subject: Switch system to LUKS-encrypted SSD

As hoped redeployment consisted only of partioning the new drive, copying the config and calling `nixos-install`.
---
 configuration.nix | 21 +++++++++++++++++----
 1 file changed, 17 insertions(+), 4 deletions(-)

(limited to 'configuration.nix')

diff --git a/configuration.nix b/configuration.nix
index b318c58..8fcab2e 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -8,12 +8,25 @@
     ./conf/fish.nix
   ];
 
-  boot.loader.grub = {
-    enable = true;
-    version = 2;
-    device = "/dev/sda";
+  boot = {
+    loader.grub = {
+      enable = true;
+      version = 2;
+      device = "/dev/sdb";
+    };
+
+    initrd.luks.devices = [
+      {
+        name   = "root";
+        device = "/dev/disk/by-uuid/6205da24-b1b2-402c-b175-4036e678dea9";
+        preLVM        = true;
+        allowDiscards = true;
+      }
+    ];
   };
 
+  fileSystems."/".options = [ "noatime" "nodiratime" "discard" ];
+
   networking = {
     hostName = "obelix";
     firewall.enable = false;
-- 
cgit v1.2.3