From d9747c64b038943253eaafdc59a49d5face46dab Mon Sep 17 00:00:00 2001
From: Fuwn <contact@fuwn.me>
Date: Fri, 20 Sep 2024 05:36:20 -0700
Subject: modules: server and core modules

---
 modules/core/software/encryption.nix | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)
 create mode 100644 modules/core/software/encryption.nix

(limited to 'modules/core/software/encryption.nix')

diff --git a/modules/core/software/encryption.nix b/modules/core/software/encryption.nix
new file mode 100644
index 0000000..53a24bb
--- /dev/null
+++ b/modules/core/software/encryption.nix
@@ -0,0 +1,16 @@
+{
+  boot = {
+    initrd.availableKernelModules = [
+      # "aesni_intel"
+      # "cryptd"
+      "usb_storage"
+    ];
+
+    # <https://wiki.archlinux.org/title/Dm-crypt/System_configuration#Timeout>
+    kernelParams = [
+      "luks.options=timeout=0"
+      "rd.luks.options=timeout=0"
+      "rootflags=x-systemd.device-timeout=0"
+    ];
+  };
+}
-- 
cgit v1.2.3