From bd5efa3648155bfdf4f90ad450caa0e08169cde3 Mon Sep 17 00:00:00 2001
From: Jake Hillion <jake@hillion.co.uk>
Date: Sun, 9 Jun 2024 23:14:44 +0100
Subject: [PATCH] tywin: encrypt root disk

---
 .../hardware-configuration.nix                               | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/hosts/tywin.storage.ts.hillion.co.uk/hardware-configuration.nix b/hosts/tywin.storage.ts.hillion.co.uk/hardware-configuration.nix
index 589d66e..8615974 100644
--- a/hosts/tywin.storage.ts.hillion.co.uk/hardware-configuration.nix
+++ b/hosts/tywin.storage.ts.hillion.co.uk/hardware-configuration.nix
@@ -20,6 +20,11 @@
       fsType = "btrfs";
     };
 
+  boot.initrd.luks.devices."root" = {
+    device = "/dev/disk/by-uuid/32837730-5e15-4917-9939-cbb58bb0aabf";
+    allowDiscards = true;
+  };
+
   fileSystems."/boot" =
     {
       device = "/dev/disk/by-uuid/BC57-0AF6";