mio-ops/hardware/linode_vm-encrypted.nix

# Configuration common to all my encrypted Linode VMs

{ config, pkgs, lib, ... }:

{
  imports = [
    # Import the NixOS Qemu guest settings
    <nixpkgs/nixos/modules/profiles/qemu-guest.nix>
  ];

  boot = {
    extraModulePackages = [ ];
    initrd = {
      availableKernelModules = [ "virtio_pci" "ahci" "sd_mod" ];
      kernelModules = [ "dm-snapshot" ];
      luks = {
        devices = {
          root = {
            device = "/dev/sdb";
            preLVM = true;
          };
        };
      };
    };
    kernelModules = [ ];
    kernelParams = [ "console=ttyS0,19200n8" ];
    loader = {
      grub = {
        forceInstall = true;
        version = 1;
        extraPerEntryConfig = "root (hd0)";
        extraConfig = ''
          serial --speed=19200 --unit=0 --word=8 --parity=no --stop=1;
          terminal_input serial;
          terminal_output serial
        '';
        device = "nodev";
      };
      timeout = 10;
    };
  };

  # File systems configuration for the Linode VMs
  fileSystems."/" = {
    device = "/dev/disk/by-label/nixos";
    fsType = "ext4";
  };

  swapDevices = [{ device = "/dev/disk/by-label/swap"; }];

  nix.maxJobs = lib.mkDefault 8;
}