This commit is contained in:
Melvin Ragusa
2026-02-03 02:51:00 +01:00
parent f0018b0f19
commit a8f29c4868
2 changed files with 12 additions and 12 deletions

View File

@@ -36,7 +36,7 @@
# ─── Bootloader: Limine with Secure Boot ───
boot.loader.systemd-boot.enable = false; # Disabled - using Limine
boot.loader.limine.enable = true;
boot.loader.limine.secureBoot.enable = true;
boot.loader.limine.secureBoot.enable = false;
boot.loader.efi.canTouchEfiVariables = true;
# ─── Kernel ───
@@ -48,14 +48,10 @@
"amdgpu.ppfeaturemask=0xffffffff" # Full AMD GPU power features (from gpu-amd.nix)
];
# ─── Full Disk Encryption (LUKS) ───
# ─── Full Disk Encryption (LUKS) ───
boot.initrd.luks.devices = {
"cryptroot" = {
device = "/dev/disk/by-label/cryptroot";
allowDiscards = true; # Enable TRIM for SSD performance
};
"cryptswap" = {
device = "/dev/disk/by-label/cryptswap";
device = "/dev/mapper/cryptswap";
allowDiscards = true;
keyFile = "/swap.key"; # Auto-unlock with keyfile after root is decrypted
};