diff options
| -rw-r--r-- | hosts/skadhi/default.nix | 15 |
1 files changed, 10 insertions, 5 deletions
diff --git a/hosts/skadhi/default.nix b/hosts/skadhi/default.nix index 87d1e313..62823488 100644 --- a/hosts/skadhi/default.nix +++ b/hosts/skadhi/default.nix | |||
| @@ -19,17 +19,22 @@ | |||
| 19 | "/var/lib/nixos" | 19 | "/var/lib/nixos" |
| 20 | "/var/lib/sops-nix" | 20 | "/var/lib/sops-nix" |
| 21 | "/var/lib/systemd" | 21 | "/var/lib/systemd" |
| 22 | config.boot.lanzaboote.pkiBundle | ||
| 22 | ]; | 23 | ]; |
| 23 | timezone = true; | 24 | timezone = true; |
| 24 | }; | 25 | }; |
| 25 | 26 | ||
| 26 | boot = { | 27 | boot = { |
| 27 | initrd.systemd = { | 28 | initrd = { |
| 28 | emergencyAccess = config.users.users.root.hashedPassword; | 29 | systemd = { |
| 29 | extraBin = { | 30 | emergencyAccess = config.users.users.root.hashedPassword; |
| 30 | "vim" = lib.getExe pkgs.vim; | 31 | extraBin = { |
| 31 | "grep" = lib.getExe pkgs.gnugrep; | 32 | "vim" = lib.getExe pkgs.vim; |
| 33 | "grep" = lib.getExe pkgs.gnugrep; | ||
| 34 | }; | ||
| 32 | }; | 35 | }; |
| 36 | |||
| 37 | luks.cryptoModules = [ "aegis128" ]; | ||
| 33 | }; | 38 | }; |
| 34 | 39 | ||
| 35 | lanzaboote.configurationLimit = 15; | 40 | lanzaboote.configurationLimit = 15; |
