about summary refs log tree commit diff
path: root/nixos/kanata/hardware-configuration.nix
diff options
context:
space:
mode:
authorsefidel <contact@sefidel.net>2024-01-23 03:44:58 +0900
committersefidel <contact@sefidel.net>2024-01-23 03:44:58 +0900
commit32bba888a932416c11359f15caf50ef7c7297ce8 (patch)
tree8dc8f27b15dec2b81efe93e22bd7f3d215e7a40b /nixos/kanata/hardware-configuration.nix
parent8aaea50551eab595ee951d1658a771127219781d (diff)
downloadnixrc-32bba888a932416c11359f15caf50ef7c7297ce8.tar.gz
nixrc-32bba888a932416c11359f15caf50ef7c7297ce8.zip
feat(nixos/kanata): use sops to unlock data pool
Diffstat (limited to 'nixos/kanata/hardware-configuration.nix')
-rw-r--r--nixos/kanata/hardware-configuration.nix2
1 files changed, 2 insertions, 0 deletions
diff --git a/nixos/kanata/hardware-configuration.nix b/nixos/kanata/hardware-configuration.nix
index ca125a0..262b0c6 100644
--- a/nixos/kanata/hardware-configuration.nix
+++ b/nixos/kanata/hardware-configuration.nix
@@ -38,6 +38,8 @@
       fsType = "zfs";
     };
 
+  # ZFS pool `smol` is decrypted using a sops key named `zfs-smol-key`.
+  # In an event of emergency, manual unlocking is possible by typing the passphrase.
   fileSystems."/smol/core" =
   { device = "smol/ds1/core";
     fsType = "zfs";