jet/nix-config
jet/nix-config
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: add encryption

Browse source
This commit is contained in:
Jet 2026-05-31 10:05:10 -07:00
parent 54ea969b61
commit 15d70f8472
No known key found for this signature in database
4 changed files with 153 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

15
hosts/framework-work/default.nix
View file

@ -1,4 +1,8 @@
{ ... }:
{ config, lib, ... }:
let
hasLuksDevice = config.boot.initrd.luks.devices != { };
in
{
imports = [
@ -9,6 +13,15 @@
networking.hostName = "framework-work";
# Once root is LUKS-encrypted, the disk passphrase is the boot password.
# GDM autologin avoids entering a second password after the disk is unlocked.
services.displayManager.autoLogin = {
enable = hasLuksDevice;
user = "jet";
};
swapDevices = lib.mkForce [ ];
fileSystems."/tmp" = {
device = "tmpfs";
fsType = "tmpfs";