system/encryption.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17

{pkgs, ...}: {
  environment.systemPackages = with pkgs; [
    cryptsetup
  ];

  environment.etc."crypttab" = {
    text = ''
      ssh-keys UUID=da31e270-80d4-4a89-9633-87dd4d736ca2 none noauto,x-systemd.device-timeout=0
    '';
  };

  fileSystems."/mnt/ssh-keys" = {
    device = "/dev/mapper/ssh-keys";
    fsType = "ext4";
    options = ["noauto" "nofail" "x-systemd.automount" "x-systemd.idle-timeout=300"];
  };
}