{ disko.devices = { disk = { nvme1n1 = { type = "disk"; device = "/dev/nvme1n1"; content = { type = "gpt"; partitions = { ESP = { label = "boot"; name = "ESP"; size = "4500M"; type = "EF00"; content = { type = "filesystem"; format = "vfat"; mountpoint = "/boot"; mountOptions = [ "umask=0077" "defaults" ]; }; }; luks = { size = "100%"; label = "luks"; content = { type = "luks"; name = "cryptroot"; # disable settings.keyFile if you want to use interactive password entry #passwordFile = "/tmp/secret.key"; # Interactive settings = { allowDiscards = true; #keyFile = "/tmp/secret.key"; }; #additionalKeyFiles = [ "/tmp/additionalSecret.key" ]; content = { type = "btrfs"; extraArgs = [ "-L" "nixos" "-f" ]; subvolumes = { "/root" = { mountpoint = "/"; mountOptions = [ "subvol=root" "compress=zstd" "noatime" ]; }; "/nix" = { mountpoint = "/nix"; mountOptions = [ "subvol=nix" "compress=zstd" "noatime" ]; }; "/persist" = { mountpoint = "/persist"; mountOptions = [ "subvol=persist" "compress=zstd" "noatime" ]; }; "/log" = { mountpoint = "/var/log"; mountOptions = [ "subvol=log" "compress=zstd" "noatime" ]; }; }; }; }; }; }; }; }; nvme0n1 = { type = "disk"; device = "/dev/nvme0n1"; content = { type = "gpt"; partitions = { luks = { size = "100%"; label = "lukshome"; content = { type = "luks"; name = "crypthome"; settings = { allowDiscards = true; #keyFile = "/tmp/secret.key"; }; content = { type = "btrfs"; extraArgs = ["-L" "home" "-f"]; subvolumes = { "/home" = { mountpoint = "/home"; mountOptions = ["subvol=home" "compress=zstd" "noatime"]; }; }; }; }; }; }; }; }; }; }; fileSystems."/nix/persist".neededForBoot = true; fileSystems."/var/log".neededForBoot = true; fileSystems."/home".neededForBoot = true; }