]> Git — Sourcephile - sourcephile-nix.git/blob - hosts/losurdo/hardware.nix
nix: update input secrets
[sourcephile-nix.git] / hosts / losurdo / hardware.nix
1 { pkgs, lib, config, inputs, hostName, ... }:
2 {
3 imports = [
4 ../../nixos/profiles/hardware/dl10j.nix
5 (inputs.julm-nix + "/nixos/profiles/zramSwap.nix")
6 ];
7
8 hardware.opengl.enable = true;
9
10 # The 32-bit host id of the host, formatted as 8 hexadecimal characters.
11 # You should try to make this id unique among your hosts.
12 # Manually generated with : head -c4 /dev/urandom | od -A none -t x4 | cut -d ' ' -f 2
13 networking.hostId = "e18f71a6";
14
15 boot.loader.grub.devices = [
16 #"/dev/disk/by-id/nvme-Samsung_SSD_970_EVO_Plus_250GB_S4EUNJ0N211426T"
17 #"/dev/disk/by-id/usb-Generic-_Multi-Card_20071114173400000-0:0"
18 #"/dev/disk/by-id/mmc-SB32G_0xdb5e2237"
19 "/dev/disk/by-id/ata-Samsung_SSD_860_EVO_250GB_S3YJNX0K863141Y"
20 ];
21
22 fileSystems."/boot" =
23 { device = "/dev/disk/by-partlabel/${hostName}_ssd_boot";
24 fsType = "ext2";
25 };
26
27 fileSystems."/boot/efi" =
28 { device = "/dev/disk/by-partlabel/${hostName}_ssd_efi";
29 fsType = "vfat";
30 };
31
32 swapDevices = [
33 { device = "/dev/disk/by-partlabel/${hostName}_nvme_swap";
34 randomEncryption = {
35 enable = true;
36 cipher = "aes-xts-plain64";
37 source = "/dev/urandom";
38 };
39 }
40 { device = "/dev/disk/by-partlabel/${hostName}_ssd_swap";
41 randomEncryption = {
42 enable = true;
43 cipher = "aes-xts-plain64";
44 source = "/dev/urandom";
45 };
46 }
47 ];
48
49 # Allow access to Yubikey USB device nodes.
50 services.udev.packages = [ pkgs.yubikey-personalization ];
51 }