Add key file

This commit is contained in:
Jakob Lechner 2024-09-26 23:31:41 +02:00
parent e01e5fcd66
commit d030591514

View file

@ -1,4 +1,6 @@
{
boot.initrd.systemd.enable = true;
disko.devices = {
disk = {
nvme = {
@ -24,6 +26,9 @@
name = "raven-crypt";
settings = {
allowDiscards = true;
keyFileSize = 4096;
keyFile = "/dev/disk/by-id/usb-jalr_RAM_Mass_Storage_DE6270431F6F342C-0:0";
keyFileTimeout = 10;
};
extraFormatArgs = [ "--hash sha512 --use-random --pbkdf argon2id --iter-time 5000 --pbkdf-memory ${builtins.toString (4*1024*1024)} --pbkdf-parallel 4" ];
content = {