From 11d05469368ecfe533c7720e7f5b624f2f8f19fc Mon Sep 17 00:00:00 2001
From: adikro <adikro@disroot.org>
Date: Sat, 7 Mar 2026 22:27:05 +0100
Subject: ...

---
 hosts/thinkpad/configuration.nix | 26 ++++++++++++++++++--------
 1 file changed, 18 insertions(+), 8 deletions(-)

(limited to 'hosts/thinkpad/configuration.nix')

diff --git a/hosts/thinkpad/configuration.nix b/hosts/thinkpad/configuration.nix
index 56a21b3..f9d3f6c 100644
--- a/hosts/thinkpad/configuration.nix
+++ b/hosts/thinkpad/configuration.nix
@@ -19,19 +19,14 @@
   os = {
     core = {
       allowUnfree.enable = true;
+      flatpak.enable = true;
 
       audio.enable = true;
       bootloader = {
         type = "grub";
+        efi = false;
         timeout = 0;
         luks.enable = true;
-        grub = {
-          device = "/dev/nvme0n1";
-          signing = {
-            enable = true;
-            keyId = "3D95543550A5A23A";
-          };
-        };
       };
       drivers = {
         enable = true;
@@ -62,6 +57,7 @@
     };
     srv = {
       bluetooth.enable = true;
+      i2p.enable = true;
       files = {
         enable = true;
         localsend.enable = true;
@@ -78,12 +74,26 @@
       nix-helper.enable = true;
       monero.enable = true;
       sops.enable = true;
+      syncthing.enable = true;
+      vpn.enable = true;
     };
     wm = {
       enable = true;
       niri.enable = true;
     };
   };
+  boot = {
+    kernelParams = [ "iomem=relaxed" ];
+    initrd = {
+      secrets = {
+        "/etc/cryptsetup-keys.d/root.key" = "/etc/cryptsetup-keys.d/root.key";
+      };
+      luks.devices."crypted" = {
+        device = "/dev/nvme0n1p2";
+        keyFile = "/etc/cryptsetup-keys.d/root.key";
+        allowDiscards = true;
+      };
+    };
+  };
   services.thinkfan.enable = true;
-  boot.kernelParams = [ "iomem=relaxed" ];
 }
-- 
cgit v1.3