From 4cbf2104b5e1b2fb6f1d8831f598c4d9397fd83e Mon Sep 17 00:00:00 2001
From: Oliver Davies <oliver@oliverdavies.dev>
Date: Wed, 11 Dec 2024 12:00:00 +0000
Subject: [PATCH] Add encrypted media drive

---
 nix/hosts/lemp11/configuration.nix | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/nix/hosts/lemp11/configuration.nix b/nix/hosts/lemp11/configuration.nix
index d9ed939..ffe00be 100644
--- a/nix/hosts/lemp11/configuration.nix
+++ b/nix/hosts/lemp11/configuration.nix
@@ -315,4 +315,16 @@
       KERNEL=="hidraw*", SUBSYSTEM=="hidraw", MODE="0660", GROUP="users", TAG+="uaccess", TAG+="udev-acl"
     '';
   };
+
+  fileSystems."/media" = {
+    device = "/dev/mapper/media";
+    fsType = "ext4";
+    options = [ "defaults" ];
+    neededForBoot = false;
+  };
+
+  boot.initrd.luks.devices.secure_drive = {
+    device = "/dev/disk/by-uuid/debb07aa-4c3e-420c-852a-d4f3c417d27f";
+    preLVM = true;
+  };
 }