blob: 75ab2be7e6c170d441e27f6e6b3422d2bea410d3 [file] [log] [blame]
Skyler Grey6aa7c262022-08-20 22:22:03 +01001{
Skyler Greyff3c6a22022-08-21 07:25:02 +01002 config = {
3 security.apparmor = {
4 enable = true;
5 killUnconfinedConfinables = true;
6 };
7
8 boot.initrd.availableKernelModules = [
9 "aesni_intel"
10 "cryptd"
11 ];
12
13 boot.initrd.luks.devices = {
14 nix.device = "/dev/disk/by-label/nix";
15 swap.device = "/dev/disk/by-label/swap";
16 hdd.device = "/dev/disk/by-label/hdd";
Skyler Grey6aa7c262022-08-20 22:22:03 +010017 };
18}