2023-09-18 06:16:42 +00:00
|
|
|
{ lib, ... }:
|
2020-08-23 23:31:28 +00:00
|
|
|
|
|
|
|
{
|
|
|
|
boot = {
|
2022-09-17 18:59:21 +00:00
|
|
|
kernelParams = [ "fbcon=rotate:1" ];
|
2020-08-23 23:31:28 +00:00
|
|
|
kernel.sysctl."vm.swappiness" = 5;
|
2023-06-06 00:51:11 +00:00
|
|
|
tmp.cleanOnBoot = true;
|
2023-09-18 06:16:42 +00:00
|
|
|
};
|
2020-08-23 23:31:28 +00:00
|
|
|
|
2023-09-18 06:16:42 +00:00
|
|
|
swapDevices = lib.mkForce [{
|
|
|
|
device = "/dev/disk/by-partuuid/ef7cb78c-a07d-45e2-a92a-0f041c42f07a";
|
|
|
|
randomEncryption = {
|
|
|
|
enable = true;
|
|
|
|
allowDiscards = true;
|
2020-08-23 23:31:28 +00:00
|
|
|
};
|
2023-09-18 06:16:42 +00:00
|
|
|
}];
|
2023-10-18 19:54:46 +00:00
|
|
|
|
|
|
|
# This has to go in crypttab because we won't have the keyfile in the initrd
|
|
|
|
environment.etc.crypttab.text = ''
|
|
|
|
microsd /dev/disk/by-uuid/51ed9e97-06cf-4c54-a71a-c182bb0ced9e /var/lib/private/µsd_key
|
|
|
|
'';
|
2020-08-23 23:31:28 +00:00
|
|
|
}
|