...

3 files changed, 36 insertions, 104 deletions

diff --git a/hosts/thinkpad/boot.key b/hosts/thinkpad/boot.key
new file mode 100644
index 0000000..6675c92
--- /dev/null
+++ b/hosts/thinkpad/boot.key
diff --git a/hosts/thinkpad/configuration.nix b/hosts/thinkpad/configuration.nix
index ecc1c52..56a21b3 100644
--- a/hosts/thinkpad/configuration.nix
+++ b/hosts/thinkpad/configuration.nix
@@ -23,10 +23,15 @@
       audio.enable = true;
       bootloader = {
         type = "grub";
-        efi = false;
         timeout = 0;
-        grub.device = "/dev/nvme0n1";
         luks.enable = true;
+        grub = {
+          device = "/dev/nvme0n1";
+          signing = {
+            enable = true;
+            keyId = "3D95543550A5A23A";
+          };
+        };
       };
       drivers = {
         enable = true;
@@ -57,9 +62,18 @@
     };
     srv = {
       bluetooth.enable = true;
-      files.enable = true;
-      gaming.enable = true;
-      virtualization.enable = true;
+      files = {
+        enable = true;
+        localsend.enable = true;
+      };
+      gaming = {
+        enable = true;
+        steam.enable = true;
+      };
+      virtualization = {
+        kvm.enable = true;
+        waydroid.enable = true;
+      };
       kdeconnect.enable = true;
       nix-helper.enable = true;
       monero.enable = true;
@@ -71,4 +85,5 @@
     };
   };
   services.thinkfan.enable = true;
+  boot.kernelParams = [ "iomem=relaxed" ];
 }
diff --git a/hosts/thinkpad/disko.nix b/hosts/thinkpad/disko.nix
index b5ccdc1..9816f7f 100644
--- a/hosts/thinkpad/disko.nix
+++ b/hosts/thinkpad/disko.nix
@@ -11,20 +11,16 @@
               size = "1M";
               type = "EF02";
             };
-            boot = {
-              size = "2G";
-              content = {
-                type = "filesystem";
-                format = "vfat";
-                mountpoint = "/boot";
-                mountOptions = [ "umask=0077" ];
-              };
-            };
             luks = {
               size = "100%";
               content = {
                 type = "luks";
-                name = "crypted_main";
+                name = "crypted";
+                keyFile = "/boot/root.key";
+                extraFormatArgs = [
+                  "--type luks2"
+                  "--pbkdf argon2id"
+                ];
                 settings.allowDiscards = true;
                 content = {
                   type = "btrfs";
@@ -38,6 +34,16 @@
                         "noatime"
                       ];
                     };
+                    "boot" = {
+                      mountpoint = "/boot";
+                      mountOptions = [
+                        "compress=none"
+                        "discard=async"
+                        "nosuid"
+                        "nodev"
+                        "noatime"
+                      ];
+                    };
                     "nix" = {
                       mountpoint = "/nix";
                       mountOptions = [
@@ -104,95 +110,6 @@
           };
         };
       };
-      storage = {
-        type = "disk";
-        device = "/dev/sda";
-        content = {
-          type = "gpt";
-          partitions = {
-            luks = {
-              size = "100%";
-              content = {
-                type = "luks";
-                name = "crypted_storage";
-                keyFile = "/tmp/crypt.key";
-                settings.allowDiscards = true;
-                content = {
-                  type = "btrfs";
-                  extraArgs = [ "-f" ];
-                  subvolumes = {
-                    "archive" = {
-                      mountpoint = "/storage/archive";
-                      mountOptions = [
-                        "compress=zstd:1"
-                        "discard=async"
-                        "nosuid"
-                        "nodev"
-                        "noatime"
-
-                        "nofail"
-                        "x-systemd.device-timeout=5s"
-                      ];
-                    };
-                    "movies" = {
-                      mountpoint = "/storage/movies";
-                      mountOptions = [
-                        "compress=none"
-                        "discard=async"
-                        "nosuid"
-                        "nodev"
-                        "noatime"
-
-                        "nofail"
-                        "x-systemd.device-timeout=5s"
-                      ];
-                    };
-                    "anime" = {
-                      mountpoint = "/storage/anime";
-                      mountOptions = [
-                        "compress=none"
-                        "discard=async"
-                        "nosuid"
-                        "nodev"
-                        "noatime"
-
-                        "nofail"
-                        "x-systemd.device-timeout=5s"
-                      ];
-                    };
-                    "pictures" = {
-                      mountpoint = "/storage/pics";
-                      mountOptions = [
-                        "compress=none"
-                        "discard=async"
-                        "nosuid"
-                        "nodev"
-                        "noatime"
-
-                        "nofail"
-                        "x-systemd.device-timeout=5s"
-                      ];
-                    };
-                    "videos" = {
-                      mountpoint = "/storage/vids";
-                      mountOptions = [
-                        "compress=none"
-                        "discard=async"
-                        "nosuid"
-                        "nodev"
-                        "noatime"
-
-                        "nofail"
-                        "x-systemd.device-timeout=5s"
-                      ];
-                    };
-                  };
-                };
-              };
-            };
-          };
-        };
-      };
     };
   };
 }