29 lines
790 B
Nix
29 lines
790 B
Nix
{}: rec {
|
|
# Mountpoints
|
|
mountpoint = "/usb";
|
|
|
|
# Partition Labels
|
|
encrypted_partlabel = "usb";
|
|
unencrypted_label = "usb_unencrypted";
|
|
|
|
# Partition Filesystems
|
|
unencrypted_fs_type = "ext4";
|
|
|
|
# Mapper Information
|
|
mapper_name = "usb_unencrypted";
|
|
|
|
# FS Paths
|
|
encrypted_path = "/dev/disk/by-partlabel/${encrypted_partlabel}";
|
|
unencrypted_path = "/dev/disk/by-label/${unencrypted_label}";
|
|
mapper_path = "/dev/mapper/${mapper_name}";
|
|
|
|
# Paths to some important files
|
|
encryption_keys_path = "${mountpoint}/encryption-keys";
|
|
|
|
chaos_age_privkey_path = "${mountpoint}/age-keys/chaoskey.priv";
|
|
chaos_age_pubkey_path = "${mountpoint}/age-keys/chaoskey.pub";
|
|
|
|
ssh_priv_path = "${mountpoint}/ssh-keys/chaos.priv";
|
|
ssh_pub_path = "${mountpoint}/ssh-keys/chaos.pub";
|
|
}
|