luks

flake.nix

@@ -65,6 +65,26 @@
         );
     in
     {
+      nixosConfigurations = {
+        sin = nixpkgs.lib.nixosSystem {
+           system = "x86_64-linux";
+          
+           modules = [
+              disko.nixosModules.disko
+              agenix.nixosModules.default
+              ./hosts/sin/configuration.nix
+              ./hosts/sin/hardware-configuration.nix
+            ]
+            ++ [
+              # modules
+              ./modules/gitea/sin
+            ];
+            
+            specialArgs = {
+             inherit inputs;
+           };
+        };
+      };
       colmenaHive = colmena.lib.makeHive {
         meta = {
           nixpkgs = import nixpkgs {
@@ -118,6 +138,7 @@
             ];
 
             deployment.targetHost = "192.168.1.14";
+            deployment.allowLocalDeployment = true;
           };
       };
       devShells = forEachSupportedSystem (

hosts/sin/luks-btrfs-raid.nix

@@ -50,39 +50,17 @@
         };
       };
 
-      data1 = {
+      data = {
         type = "disk";
         device = "/dev/sda";
         content = {
           type = "gpt";
           partitions = {
-            crypt_p1 = {
+            crypt_p = {
               size = "100%";
               content = {
                 type = "luks";
-                name = "p_data1"; # device-mapper name when decrypted
-                # Remove settings.keyFile if you want to use interactive password entry
-                settings = {
-                  allowDiscards = true;
-                  keyFile = "/dev/disk/by-uuid/2021-07-11-12-33-27-00";
-                  keyFileSize = 4096;
-                };
-              };
-            };
-          };
-        };
-      };
-      data2 = {
-        type = "disk";
-        device = "/dev/sdb";
-        content = {
-          type = "gpt";
-          partitions = {
-            crypt_p2 = {
-              size = "100%";
-              content = {
-                type = "luks";
-                name = "p_data2";
+                name = "p_data";
                 # Remove settings.keyFile if you want to use interactive password entry
                 settings = {
                   allowDiscards = true;
@@ -91,10 +69,6 @@
                 };
                 content = {
                   type = "btrfs";
-                  extraArgs = [
-                    "-d raid0"
-                    "/dev/mapper/p_data1" # Use decrypted mapped device, same name as defined in disk1
-                  ];
                   subvolumes = {
                     "/" = {
                       mountpoint = "/mnt/fs";

hosts/thea/configuration.nix

@@ -20,7 +20,6 @@ in
     # ./cybercoffee
     ./ollama.nix
     ./minecraft.nix
-    ./secrets
     ./nix-serve.nix
   ];