45 lines
1.2 KiB
Nix
45 lines
1.2 KiB
Nix
{config, lib, ...}:
|
|
{
|
|
# Use the systemd-boot EFI boot loader.
|
|
boot = {
|
|
loader = {
|
|
systemd-boot.enable = true;
|
|
efi = {
|
|
canTouchEfiVariables = true;
|
|
efiSysMountPoint = "/boot/efi";
|
|
};
|
|
};
|
|
initrd = {
|
|
network = {
|
|
enable = true;
|
|
ssh = {
|
|
enable = true;
|
|
port = 22;
|
|
authorizedKeys = config.users.users.root.openssh.authorizedKeys.keys;
|
|
hostKeys = [
|
|
"/boot/efi/initrd_id_ed25519"
|
|
"/boot/efi/initrd_id_rsa4096"
|
|
];
|
|
};
|
|
};
|
|
systemd = {
|
|
enable = true;
|
|
network = config.systemd.network;
|
|
targets.initrd.wants = [
|
|
"systemd-networkd-wait-online@enp1s0.service"
|
|
];
|
|
users.root.shell = "/bin/systemd-tty-ask-password-agent";
|
|
};
|
|
availableKernelModules = [ "xhci_pci" "ahci" "nvme" "usbhid" "usb_storage" "sd_mod" "virtio_pci" "r8169" ];
|
|
kernelModules = [ "dm-snapshot" ];
|
|
luks.devices."backstage" = {
|
|
preLVM = true;
|
|
device = "/dev/disk/by-uuid/7f3ccd2d-8022-491e-baa1-675805919fd7";
|
|
};
|
|
};
|
|
kernelModules = [ "kvm-intel" ];
|
|
kernelParams = [
|
|
"zfs.zfs_arc_max=1024000000"
|
|
];
|
|
};
|
|
}
|