hunner/nix
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

sops hosts layout

Browse source
This commit is contained in:
Hunter Haugen 2025-12-29 12:26:16 -08:00
parent 6b30d11d42
commit f9250db3d8
Signed by: hunner
GPG key ID: EF99694AA599DDAD
20 changed files with 585 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

88
hosts/liminal/disko.nix Normal file
View file

@ -0,0 +1,88 @@
# Config for framework 16
# sudo nix --experimental-features "nix-command flakes" run github:nix-community/disko/latest -- --mode destroy,format,mount disko.nix
{
disko.devices = {
disk = {
nvme0n1 = {
type = "disk";
device = "/dev/nvme0n1";
content = {
type = "gpt";
partitions = {
ESP = {
label = "boot";
name = "ESP";
size = "512M";
type = "EF00";
content = {
type = "filesystem";
format = "vfat";
mountpoint = "/boot";
mountOptions = [ "umask=0077" "defaults" ];
};
};
swap = {
size = "70G";
type = "8200";
content = {
type = "swap";
resumeDevice = true;
};
};
cryptroot = {
size = "100%";
content = {
type = "luks";
name = "cryptroot";
passwordFile = "/tmp/secret.key";
settings = {
allowDiscards = true;
crypttabExtraOpts = [ "no-read-workqueue" "no-write-workqueue" ];
};
content = {
type = "btrfs";
extraArgs = [ "-L" "nixos" "-f" ];
subvolumes = {
"/persist" = {
mountpoint = "/persist";
mountOptions = [ "compress=zstd" "noatime" "ssd" "space_cache=v2" ];
};
"/home" = {
mountpoint = "/home";
mountOptions = [ "compress=zstd" "noatime" "ssd" "space_cache=v2" ];
};
"/var/log" = {
mountpoint = "/var/log";
mountOptions = [ "compress=zstd" "noatime" "ssd" "space_cache=v2" ];
};
"/var/lib" = {
mountpoint = "/var/lib";
mountOptions = [ "compress=zstd" "noatime" "ssd" "space_cache=v2" ];
};
"/nix" = {
mountpoint = "/nix";
mountOptions = [ "compress=zstd" "noatime" "ssd" "space_cache=v2" ];
};
};
};
};
};
};
};
};
};
nodev = {
"/" = {
fsType = "tmpfs";
mountOptions = [
"defaults"
"size=4G"
"mode=755"
];
};
};
};
filesystems."/persist".neededForBoot = true;
filesystems."/var/log".neededForBoot = true;
}