harald/nixcfg
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

sgx: add raid disks

Browse source 
Signed-off-by: Harald Hoyer <harald@hoyer.xyz>
This commit is contained in:
Harald Hoyer 2024-03-19 14:46:44 +01:00
parent 0e548b42c0
commit a12d6bd417
2 changed files with 55 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
systems/x86_64-linux/sgx/default.nix
View file

@ -5,6 +5,7 @@ with lib.plusultra;
imports = [ ./hardware-configuration.nix ];
sops.secrets.pccs.sopsFile = ../../../.secrets/sgx/pccs.yaml;
sops.secrets.backup-pw.sopsFile = ../.secrets/sgx/backup-s3.yaml;
plusultra = {
base.enable = true;

54
systems/x86_64-linux/sgx/hardware-configuration.nix
View file

@ -34,6 +34,60 @@
swapDevices =
[{ device = "/dev/disk/by-uuid/72d061d7-ab18-47b9-beb1-1c465dda1be9"; }];
boot.initrd.luks.devices."a16" = {
gpgCard.publicKey = ./yubikey-public.asc;
gpgCard.encryptedPass = ./luks-passphrase.asc.gpg;
device = "/dev/disk/by-uuid/6f1c1b24-3c94-44be-8d1b-70db562079c1"; };
boot.initrd.luks.devices."b16" = { device = "/dev/disk/by-uuid/9540de6d-c907-43e4-b740-2d75dbf37135"; };
boot.initrd.luks.devices."a4" = { device = "/dev/disk/by-uuid/72924bd6-3d58-4437-aafd-ae6d2b995fbf"; };
boot.initrd.luks.devices."b4" = { device = "/dev/disk/by-uuid/459c8d9a-6e92-4dec-a998-701ab9e76a2e"; };
boot.initrd.luks.devices."c4" = { device = "/dev/disk/by-uuid/5c61cbf0-dbca-48e0-948e-71bea3806a6c"; };
fileSystems."/mnt/raid" = {
fsType = "btrfs";
device = "/dev/disk/by-uuid/11727be7-bf9b-4888-8b02-d7eb1f898712";
options = [ "defaults" "compress=zstd" "subvol=root" "autodefrag" "noatime" "nofail" "x-systemd.device-timeout=5" ];
};
fileSystems."/mnt/backup" = {
fsType = "btrfs";
device = "/dev/disk/by-uuid/c29e7eac-26ba-41b1-ac3e-11123476b7c5";
options = [ "defaults" "compress=zstd" "subvol=root" "autodefrag" "noatime" "nofail" "x-systemd.device-timeout=5" ];
};
systemd.services.hd-idle = {
description = "Set to idle";
wantedBy = [ "multi-user.target" ];
after = [
"dev-sdb.device"
"dev-sdc.device"
"dev-sdd.device"
"dev-sde.device"
"dev-sdf.device"
];
bindsTo = [
"dev-sdb.device"
"dev-sdc.device"
"dev-sdd.device"
"dev-sde.device"
"dev-sdf.device"
];
serviceConfig = {
Type = "oneshot";
ExecStart = "${pkgs.hdparm}/sbin/hdparm -S 60 /dev/sdb /dev/sdc /dev/sdd /dev/sde /dev/sdf";
};
};
powerManagement.powerUpCommands = ''
${pkgs.hdparm}/sbin/hdparm -S 60 /dev/sdb
${pkgs.hdparm}/sbin/hdparm -S 60 /dev/sdc
${pkgs.hdparm}/sbin/hdparm -S 60 /dev/sdd
${pkgs.hdparm}/sbin/hdparm -S 60 /dev/sde
${pkgs.hdparm}/sbin/hdparm -S 60 /dev/sdf
'';
# Enables DHCP on each ethernet and wireless interface. In case of scripted networking
# (the default) this is the recommended approach. When using systemd-networkd it's
# still possible to use this option, but it's recommended to use it in conjunction