machines/rana: enable full-disk encryption

2026-03-24 15:36:46 +07:00
parent fc2da628e8
commit d8b20caf22
1 changed files with 3 additions and 0 deletions
--- a/machines/rana/disko.nix
+++ b/machines/rana/disko.nix
@@ -53,6 +53,9 @@ in
      zroot = {
        type = "zpool";
        rootFsOptions = {
+          encryption = "aes-256-gcm";
+          keyformat = "passphrase";
+          keylocation = "file:///tmp/secret.key";
          mountpoint = "none";
          compression = "lz4";
          acltype = "posixacl";