Switch back to zfs

This commit is contained in:
Charlotte 🦝 Delenk 2022-04-02 07:49:40 +01:00
parent 947deaf373
commit 2c55adf435
Signed by: darkkirb
GPG key ID: AB2BD8DAF2E37122
3 changed files with 88 additions and 26 deletions

View file

@ -1,7 +1,7 @@
keys:
- &lotte 46C6A7E14BC7812E86C2700737FE303AAC2D06CD
- &nixos-8gb-fsn1-1 age1273ps5thcy70ckdt0270s2nysqgu48t38pq3wq975v3y7mf4eavsw38wsl
- &nutty-noon age1n7c6dp8xn3vl63l8qevun24v3mtggkve0svsrs2lsg992m99jgwq84aw45
- &nutty-noon age1wfftrnyngg7nxcwvt7m590fwx3w7p4kkrjn9uprjq0u3k3ym4s3qqzkmzm
- &thinkrac age1e7tqq7ezjtwsunt6plvstevg32p97cmqpejpj20gmrkfe0l7gv9se08zf7
creation_rules:
- path_regex: secrets/nixos-8gb-fsn1-1\.yaml$

View file

@ -21,7 +21,8 @@
config.boot.kernelPackages.zenpower
];
boot.supportedFilesystems = [ "bcachefs" ];
boot.supportedFilesystems = [ "zfs" ];
boot.zfs.devNodes = true;
boot.initrd.luks.devices = {
ssd = {
@ -34,8 +35,69 @@
};
fileSystems."/" = {
device = "/dev/mapper/ssd:/dev/mapper/hdd";
fsType = "bcachefs";
device = "ssd/nixos";
fsType = "zfs";
options = ["zfsutil"];
};
fileSystems."/nix" = {
device = "ssd/nixos/nix";
fsType = "zfs";
options = ["zfsutil"];
};
fileSystems."/etc" = {
device = "ssd/nixos/etc";
fsType = "zfs";
options = ["zfsutil"];
};
fileSystems."/var" = {
device = "ssd/nixos/var";
fsType = "zfs";
options = ["zfsutil"];
};
fileSystems."/var/lib" = {
device = "ssd/nixos/var/lib";
fsType = "zfs";
options = ["zfsutil"];
};
fileSystems."/var/log" = {
device = "ssd/nixos/var/log";
fsType = "zfs";
options = ["zfsutil"];
};
fileSystems."/var/spool" = {
device = "ssd/nixos/var/spool";
fsType = "zfs";
options = ["zfsutil"];
};
fileSystems."/home" = {
device = "ssd/userdata/home";
fsType = "zfs";
options = ["zfsutil"];
};
fileSystems."/root" = {
device = "ssd/userdata/root";
fsType = "zfs";
options = ["zfsutil"];
};
fileSystems."/home/darkkirb" = {
device = "ssd/userdata/home/darkkirb";
fsType = "zfs";
options = ["zfsutil"];
};
fileSystems."/build" = {
device = "hdd/build";
fsType = "zfs";
options = ["zfsutil"];
};
fileSystems."/boot" = {

View file

@ -1,46 +1,46 @@
network:
wireguard:
privkey: ENC[AES256_GCM,data:Vnw0DzDgJimKGsCwZRQkEhD32rJwLcedvFWDF7Mf5O69Lw45QoKxDaZZwIo=,iv:UhU0z1KeuwFwA/EjBg17NDWBhmscPpwNYXIB7uNBnuw=,tag:hoIeSg3WKPHafYkPtVu4Rg==,type:str]
privkey: ENC[AES256_GCM,data:y0yJd/IsKQIuYPnf/GKtQy8HXeS5PeiM0FMu1ZWqMOaO22LnJcWfQV9IZs8=,iv:nQNKSYgaQ+kgxiFRatMFGyJm3ui8iQ+xKIU9zOF2RiM=,tag:bDQE9cUrXAa8VuG0pMwf8g==,type:str]
services:
hydra:
gitea_token: ENC[AES256_GCM,data:tpfYiDtbi1TnuJxzT5OQUJpoyYD9M4ahaqf+B5/i9sVs8z1kuQMQHQ==,iv:YJYOwYibHi2DNNvFLmMiphNHPhIVEIQOkpHkyvxQmOc=,tag:Ct89x5dwtwVLoVPNfy31yg==,type:str]
gitea_token: ENC[AES256_GCM,data:MMDgCQSuRPBav6YhdW2tcE0p2s24yDzACgqdm6kBrdlpaNkXxBw8ZQ==,iv:q8ye1vW4SeHzwJjf3Mfbac76dtIYid6E61nBMWj5sUg=,tag:qskumtwySnkPKof95BvnGg==,type:str]
security:
restic:
password: ENC[AES256_GCM,data:ddKNt7QjKt90lV9A3SRi4t0bwL0=,iv:YTmQ0OZ+Ka3O7y15oFlcgDJEwwJKUoTfyRb4hBMbxGo=,tag:1cmjXZ0KKvJTWXohl8UFnA==,type:str]
password: ENC[AES256_GCM,data:Mr8uOq7UtN7hdWWQQbyDfdC+jzI=,iv:Ey2Q0O+UPVhrb+z54l/w6sk3OQEAvAoMyP6TfJBRgmI=,tag:4z/NvwFpEE/QE7i/lSeexQ==,type:str]
acme:
dns: ENC[AES256_GCM,data:VQsFxA1NKfAoQpeXbCRrQJRFuxi2sKpr8n6DU0scbBQToynumy/21tEpghPKWLP/kFLC1WXDos4Wy9THtjhh8KYpa9QjHxpzzY2XJQSVJKE5im6pCQJhromt5hoSoBa1yI+GYGEmA/k5L3FG/i3jjMgkDpnOLow6Kk0GkdkL0HljJKImvSviM6TLkhcbW3MfiW5W8xJh11KmWGFX7Yteu1gCVF5fUHRwT/XoM/ADfWJSkP/9NOXGcdC6NX55Z4YsG8ew7H62aJBV2JmNGOH9vMI4EV/++u6s9Q==,iv:Cw4PW4e94sLoVbj1xdxdilp4zR4qxzhKcn3b9VkmgEI=,tag:RNvpsUy/lKgquRzHe/ObCg==,type:str]
dns2: ENC[AES256_GCM,data:cFqhvKMbgQa3VfCVdWi6CCEe6zJSIEKu/p7wCEmAIttw8RVRwFh+0EkwPPSUU9qGz2KjeNlLhU09uIiAR18W7rZVYIos86sumIsKDx17+m0Y4jTl65yNpbK9/bgl5Ki/KmYIkteJPlC0WA3urSmLLU+ta5hKrlaQz7rW/4k33oTgUFz0iIp4GZRU6Cuy3aJkibj0rsPlS3iTnRRSi6apvaD2IkwPVqQda82Ocq2ZXcMW7eU9/VyG8QvcFtaef4PY3YeRBz4c3laGBXfsmemm/nhYaZe0fzWRUA==,iv:AdshgaCZ2cYiRtT6DAM5IpQK0pnFSvMwmzObA96O3Vs=,tag:MOnmX74gcWT6N6HTL0p6ow==,type:str]
cloudflare: ENC[AES256_GCM,data:H5gugcClNe1y1mSv10j4qjZUvYfoO5I9EXn52gaRdkh3OHu1gMivreGKbMLmpjQfqz6Fbp3po3hxw1BBvUs9Tfj+2sXj5YrOjEfr4awAhhsb+7McKVS3ok0vgCr4t/bfnSxlJYSOsLaBtGVzPt5yrlwylYa/z1SSmXBT1vY5bszF0i5f/Hg43TpvUqUnS2ckgLgGq1NewoI25oUYl/Iswen6Y0LK3tuyxWZgsE/wPPuxezjSOqvyZKQ=,iv:ouVcVX6aqiCGbAyYk5FMaUPN8X2DqWh6In3Rxh7p7ts=,tag:9iCG9rIhuuR+8Ry23FwL+g==,type:str]
dns: ENC[AES256_GCM,data:vxGlQldRgsQErlZ5SzvjmDGth3Ozf3FIsREp7rPevzWEdeQzrX5U1f9enBed2Bdysa2SIdxtI5ZFl9Tql7YWBLFGURvjjeWEFE5FjoOznlYGqKDMUcnnoWcMa99fXpQAdYP1ThgRPZ69DAeLOopndHAl0KFQgwJFrRDlSDfj19orcJ4pXxGmw1dEY0SpiU71SfmS3oLyvdWNmnPklC46qcK4q/D+SON1Nk2J4O0rTDi6OgZv37fVz4I17P66L5XVzepwZGppGIJDd+IdIm/I55Q99kjeRj2VVw==,iv:WkGdSldoBepdtoIouIRTCfWVHmp9wYkYqUonzWo4H+o=,tag:/l7NAQxYzr8dfflsKhEUcw==,type:str]
dns2: ENC[AES256_GCM,data:j5Lmr1T1BfPKJmdf+Z9MYx7L9z/PqDTHTxYZo/osln7/wx+vlGf/1zWKq0m2AUObqIGRDqytKuOIwiGw+Q32OviEF2TwJkyLg0Dxjp5u9un8ha6FAa7YgfbHCw6W/FS8xWP/CE6ZOxgDd6e6NgPB8WcPltlsNMKtQ9gjQ6IZm4mdzfCcsjIerI6ZTkHjJHGZJSadJ8zFLeFaHosAIneDQC8ODRyDE8lSZuscIMCVhR+ynvsncSGOu7Vkh5mLPmseZjURiKrpNmxB/xkFvfdkwNnEUUJs4Da79w==,iv:yjA/yp8wOAA++hSKETPbXXOuAN0pozdgMDOFh0nNvq0=,tag:oAiiN/ol76kVEunoruAliQ==,type:str]
cloudflare: ENC[AES256_GCM,data:WfSxl91cv+1ztYN7AGLyNAX8tkF1OjAF5sndqVvZHpbWmq8IfeuVe1Xu/FNdZVUeSinyDCuf0uMBMlaE+frIdHbm/MrvnlVQ7oBmtmDKsj40P19TqLD77KqRfccX8tDsEeTsasFT/7fWab9zchHzmb7UMcb7372LwmAtGgtEW6AfF8RKKt7fEPJGWx8pcxKdUhFvrn6C0Wvg+yh0v0NpX3DNz8psx4zkd/BU9CGHBP+O5SIRbdSHYU8=,iv:5gPdKrlPCxKyq2hQqM/PzTgaT+xDpo6Czdf1BUpxlbI=,tag:S+A5XRHNDzSu2NuqR0id1A==,type:str]
email:
lotte@chir.rs: ENC[AES256_GCM,data:3hRtixj3vPxJ+DkEUVSGD1wiYg==,iv:RyfBwu2glu9jVXVJQdngySZEBu0lzsqeGzbrsCYmqEI=,tag:0vp7kQdIirlbKoLpiBpErA==,type:str]
mdelenk@hs-mittweida.de: ENC[AES256_GCM,data:nFFTbbTj9UhFe5MSEG0GgITqideEh51byYESVGQ59bbdi/lckVnP84zAU87EaDPWBx+5csep+k7eosMZQBiOlQ==,iv:bxDzRUZPop768+VvDIBwVOB4NR20QGmuxu9g1MT29OI=,tag:LPSOz4T4Hgf7FQhNaAs+Aw==,type:str]
lotte@chir.rs: ENC[AES256_GCM,data:02v6qsTC30thvqQ4yDpYhfyNVg==,iv:rdz3HHlAyyt1TR7iUXpokIlBC8VEdS0GLoCkItBc3HY=,tag:/aNoPNoMeVGCWRT3j+F+ew==,type:str]
mdelenk@hs-mittweida.de: ENC[AES256_GCM,data:rXwwhdX2STqJjO2UMqW9YeXc8JtJ2DXLptZvVN9552ldRgZU7OoNiPxbYg/Kr7ZOkl/8HIg0yFa1uQIbvQxuoQ==,iv:ThZzE7m05FS1NPH/mvWF/vflxC4pmZCMX12iOUzKQfQ=,tag:qK0+ZA8486YgaW/I7BrfPQ==,type:str]
sops:
kms: []
gcp_kms: []
azure_kv: []
hc_vault: []
age:
- recipient: age1n7c6dp8xn3vl63l8qevun24v3mtggkve0svsrs2lsg992m99jgwq84aw45
- recipient: age1wfftrnyngg7nxcwvt7m590fwx3w7p4kkrjn9uprjq0u3k3ym4s3qqzkmzm
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhT1BCa2hnbnZ0VEVIalJN
TFFxd2Z5UHd4aFZxd3pxUjBGczBHdHJJV2dVClNyTTdiTTBxSmRYRHdQeW5uVi9l
N2VFam04cTEyc0hhL3M1TGVQR0xmaGMKLS0tIEFZMlJEMk9xekVOTDROU01rT2xi
dkZHa1pGNmNDU3U4SFRQNTZPZ21HeUEKdqTjc9KfD38zrMi/FDq+ipBWjdHM9zwY
15E2yPPb1lTATP4nxoC67u/8yyauFEJiQsJQa4VVlOahrNjciVMY4Q==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzcDBaa0FXM21xNGErS3RH
S0gzZjJ1ZEFNTTFUZElMVFErVU0vbmVqQ0N3ClNpODB6djJ1bCtHNkVyQXFXWEpN
MkVabkJEUDJ4enVIRHFmcGlBRmsxcjgKLS0tIDBsTllyYXdsK0NLSDRKTkFRbk9P
U0JxSTR3WEFvZjVoMjJsV3NYNVFpYTAKxCpvEDbEjh3sNR+2X7AsReYPxi9n3bpP
g+IVnv+EX9CkqBNbpAHiwqzekVXNqM7SxMmgSasZ4IGRK1Wcf5NU0w==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2022-03-26T12:25:41Z"
mac: ENC[AES256_GCM,data:yuYdX1S2kzO+kjchLuTAkwOxd/sy91SUV8X4dVaubXKKx2ClZoO6RaevKX4nuSUwnkf6gIDACu7VFeeOzo/l48RvP1t4bQIf0ei9VVVTibWKAqB9yWZnHXYPFQFLYyV/0x+nAXMf7j/LpQgQ8kxrydmhA3pSGO03Ndm2sBswwSg=,iv:AG0EmG+umszdh1crdvv3nkvy493mnXLCseojdzPoxds=,tag:w558TQukzCUApFkHmeFqyA==,type:str]
lastmodified: "2022-04-02T06:17:42Z"
mac: ENC[AES256_GCM,data:M8iI7zE/RRd3LuX/pAb+CIWXZSx9wZ0OBq/sNSxCRl3KkCjDbk1+P5b3M4YpmV9kPVC4W+ML3on6ZcgyFL+Xc/K1pIEmfKaKVcHvTbL7Tvn3ubhppTNT5XxSWD6A02pqWR0TGS/zFVwra1RvkE5eWlkMSO1V48PTV7nxEoGQFnM=,iv:784+BF+HBszh2kqP7eAmH1GXh6aICs3jRmoOjlTA5h8=,tag:qNg2/Lbmroo9ylY9UlgIfA==,type:str]
pgp:
- created_at: "2022-03-26T12:25:40Z"
- created_at: "2022-04-02T06:17:40Z"
enc: |
-----BEGIN PGP MESSAGE-----
hF4DAAAAAAAAAAASAQdAZqm0Z5ICOFn3mB8gOq0P/tUbUXYbdBsaK+HaugVX/Fgw
tmNxcago0RFIpcKj/qPutSfYlM4J4j/tfL/Pwmaazn3HFveKAYq3WIEMGGWDLsOe
0l4BPca19jP+nSMw5f8CLgucx0Kj2ONY8vzZpiHiEn0qdRN5oJFfyG5dervCeZiF
vsKV6PR5VdnDaBhHsGckddcKxJEP3+ITy8DVVMaTM/AX+VPTBCUBU7l7KCf/VbZX
=t2DM
hF4DAAAAAAAAAAASAQdACVlYZwj9xdlHrbQ/yMc8jx0Ls3LSAyWGqJiIaj1ksRsw
XvU2dbAYhSLrpJSkTU+lSmjXFmPrq7GnkNKy+bPFWu7bmghKItXpO//6AcU7IB9m
0l4BOrloU1EedUf6rJUewUtQP7nNXsJ+iqWOMpN5Y6GX4UWeXMZ8AgSEqpHni9QV
KFa5VdU73/ms2+zatFxqj1bix4ZZqsxwapWreyKgo2jwIOVLZyHAu9TyoN7rLyLP
=x+Y/
-----END PGP MESSAGE-----
fp: 46C6A7E14BC7812E86C2700737FE303AAC2D06CD
unencrypted_suffix: _unencrypted