History

Jake Hillion c33d5c2edd All checks were successful flake / flake (push) Successful in 1m29s Details secrets: re-encrypt with boron user key		2024-10-27 00:43:47 +01:00
..
clevis_config.json	boron: move to kernel 6.8 and re-image	2024-05-08 21:11:09 +01:00
default.nix	secrets: re-encrypt with boron user key	2024-10-27 00:43:47 +01:00
hardware-configuration.nix	boron: bump tmpfs to 100% of RAM	2024-08-31 22:04:38 +01:00
README.md	tywin: enable clevis/tang for boot	2024-06-10 22:34:28 +01:00
system	boron.cx: add new dedicated server	2024-04-23 20:45:44 +01:00

README.md

boron.cx.ts.hillion.co.uk

Additional installation step for Clevis/Tang:

$ echo -n $DISK_ENCRYPTION_PASSWORD | clevis encrypt sss "$(cat /etc/nixos/hosts/boron.cx.ts.hillion.co.uk/clevis_config.json)" >/mnt/data/disk_encryption.jwe
$ sudo chown root:root /mnt/data/disk_encryption.jwe
$ sudo chmod 0400 /mnt/data/disk_encryption.jwe