updated disko setup

nix/configuration.nix

@@ -4,7 +4,7 @@
   imports = [
     ./users/users.nix
     ./modules/ssh.nix
-    ./hardware-configuration.nix
+    ./vps/hetzner/hardware-configuration.nix
     ./modules/zsh.nix
    ];
 
@@ -14,6 +14,10 @@
   # Bootloader.
   boot.loader.grub.enable = true;
 
+  
+  boot.initrd.kernelModules = [ "virtio_gpu" ];
+  boot.kernelParams = [ "console=tty" ];  
+
   networking.hostName = "matrix";
 
   # time zone

nix/disko.nix

@@ -1,4 +1,4 @@
-
+# other examples, see https://github.com/nix-community/disko/blob/master/example/
 {
   disko.devices = {
     disk = {
@@ -8,26 +8,29 @@
         content = {
           type = "gpt";
           partitions = {
-            boot = {
-              size = "1M";
-              type = "EF02";
-              priority = 1;
-            };
             ESP = {
-              size = "512M";
+              size = "500M";
               type = "EF00";
               content = {
                 type = "filesystem";
                 format = "vfat";
                 mountpoint = "/boot";
+                mountOptions = [ "umask=0077" ];
               };
             };
-            root = {
+            luks = {
               size = "100%";
               content = {
-                type = "filesystem";
-                format = "ext4";
-                mountpoint = "/";
+                type = "luks";
+                name = "crypted";
+                settings.allowDiscards = true; # Enable SSD TRIM support
+                passwordFile = "/tmp/secret.key"; # install time key file location
+                # additionalKeyFiles = [ "/tmp/additionalSecret.key" ];
+                content = {
+                  type = "filesystem";
+                  format = "ext4";
+                  mountpoint = "/";
+                };
               };
             };
           };
@@ -35,4 +38,4 @@
       };
     };
   };
-}
+}

nix/hardware-configuration.nix

@@ -1,17 +0,0 @@
-{ config, lib, pkgs, modulesPath, ... }:
-
-{
-  imports = [
-    (modulesPath + "/profiles/qemu-guest.nix")
-  ];
-
-  boot.initrd.availableKernelModules = [ "ata_piix" "virtio_pci" "virtio_blk" ];
-  boot.initrd.kernelModules = [ ];
-  boot.kernelModules = [ ];
-  boot.extraModulePackages = [ ];
-
-  networking.useDHCP = lib.mkDefault true;
-
-  # aarch64-linux?
-  nixpkgs.hostPlatform = lib.mkDefault "aarch64-linux";
-}

nix/vps/hetzner/aarch64.nix

@@ -0,0 +1,11 @@
+{ config, lib, ... }:
+
+{
+  # Specific settings for Hetzner Cloud AArch64 instances
+  # https://wiki.nixos.org/wiki/Install_NixOS_on_Hetzner_Cloud#AArch64_(CAX_instance_type)_specifics
+  boot.initrd.kernelModules = [ "virtio_gpu" ];
+  boot.kernelParams = [ "console=tty" ];  
+
+  # aarch64-linux
+  nixpkgs.hostPlatform = lib.mkDefault "aarch64-linux";
+}

nix/vps/hetzner/hardware-configuration.nix

@@ -0,0 +1,10 @@
+{ config, lib, pkgs, modulesPath, ... }:
+
+{
+  imports = [
+    (modulesPath + "/profiles/qemu-guest.nix")
+    ./aarch64.nix
+  ];
+
+  networking.useDHCP = lib.mkDefault true;
+}