felschr/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(home-server): set up clevis

Browse source
This commit is contained in:
Felix Schröter 2024-06-03 19:45:03 +02:00
parent cf969f5bca
commit f143602d38
Signed by: felschr
GPG key ID: 671E39E6744C807D
2 changed files with 6 additions and 0 deletions

5
hosts/home-server.nix
View file

@ -143,6 +143,11 @@ in
authorizedKeys = config.users.users.felschr.openssh.authorizedKeys.keys;
};
};
# allow automated decryption
# `echo -n '<LUKS passphrase here>' | clevis encrypt tang '{"url": "http://doctr:9090"}' > home-server-enc.jwe`
boot.initrd.clevis.enable = true;
boot.initrd.clevis.useTang = true;
boot.initrd.clevis.devices."enc".secretFile = ../secrets/clevis/home-server-enc.jwe;
systemd.notify = {
enable = true;