blob: a73907cdd9a3eaff10ffbff399f13d8216e05ab9 [file] [log] [blame]
Skyler Grey6aa7c262022-08-20 22:22:03 +01001{
Skyler Greyff3c6a22022-08-21 07:25:02 +01002 config = {
3 security.apparmor = {
4 enable = true;
5 killUnconfinedConfinables = true;
6 };
7
8 boot.initrd.availableKernelModules = [
9 "aesni_intel"
10 "cryptd"
11 ];
12
13 boot.initrd.luks.devices = {
14 nix.device = "/dev/disk/by-label/nix";
15 swap.device = "/dev/disk/by-label/swap";
16 hdd.device = "/dev/disk/by-label/hdd";
Skyler Grey0fa154f2022-08-21 07:30:37 +010017 };
Skyler Grey6aa7c262022-08-20 22:22:03 +010018 };
19}