added initial password for willifan

hosts/Lenni/disko.nix

@@ -24,6 +24,8 @@
               content = {
                 type = "luks";
                 name = "cryptroot";
+                settings.allowDiscards = true;
+                passwordFile = "/tmp/secret.key";
                 content = {
                   type = "btrfs";
                   extraArgs = [ "-f" ];

hosts/Lenni/hardware-configuration.nix

@@ -8,38 +8,17 @@
     [ (modulesPath + "/installer/scan/not-detected.nix")
     ];
 
-  boot.initrd.availableKernelModules = [ "nvme" "xhci_pci" "thunderbolt" ];
+  boot.initrd.availableKernelModules = [ "nvme" "xhci_pci" "thunderbolt" "usb_storage" "sd_mod" ];
   boot.initrd.kernelModules = [ ];
   boot.kernelModules = [ "kvm-amd" ];
   boot.extraModulePackages = [ ];
 
-  fileSystems."/" =
-    { device = "/dev/disk/by-uuid/e09e7d80-9d85-49e6-8b0e-1f31aea83840";
-      fsType = "btrfs";
-      options = [ "subvol=@" ];
-    };
-
-  boot.initrd.luks.devices."luks-a2f76baf-2f27-42a4-ae48-1963c566a9ab".device = "/dev/disk/by-uuid/a2f76baf-2f27-42a4-ae48-1963c566a9ab";
-
-  fileSystems."/boot" =
-    { device = "/dev/disk/by-uuid/2A99-D7CC";
-      fsType = "vfat";
-      options = [ "fmask=0022" "dmask=0022" ];
-    };
-
-  fileSystems."/mnt/nfs" =
-    { device = "/nix/store/8zm9gh07p3rx8b3vqiwa1qb7zsml17sk-auto.nfs";
-      fsType = "autofs";
-    };
-
-  swapDevices = [ ];
-
   # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
   # (the default) this is the recommended approach. When using systemd-networkd it's
   # still possible to use this option, but it's recommended to use it in conjunction
   # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
   networking.useDHCP = lib.mkDefault true;
-  # networking.interfaces.enp195s0f3u1c2.useDHCP = lib.mkDefault true;
+  # networking.interfaces.enp195s0f4u1c2.useDHCP = lib.mkDefault true;
   # networking.interfaces.wlp1s0.useDHCP = lib.mkDefault true;
 
   nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";

iso/flake.lock

@@ -2,17 +2,18 @@
   "nodes": {
     "nixos": {
       "locked": {
-        "lastModified": 1717179513,
+        "lastModified": 1747209494,
-        "narHash": "sha256-vboIEwIQojofItm2xGCdZCzW96U85l9nDW3ifMuAIdM=",
+        "narHash": "sha256-fLise+ys+bpyjuUUkbwqo5W/UyIELvRz9lPBPoB0fbM=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "63dacb46bf939521bdc93981b4cbb7ecb58427a0",
+        "rev": "5d736263df906c5da72ab0f372427814de2f52f8",
         "type": "github"
       },
       "original": {
-        "id": "nixpkgs",
+        "owner": "NixOS",
-        "ref": "24.05",
+        "ref": "nixos-24.11",
-        "type": "indirect"
+        "repo": "nixpkgs",
+        "type": "github"
       }
     },
     "root": {

iso/flake.nix

@@ -1,7 +1,7 @@
 {
   description = "Minimal NixOS installation media";
 
-  inputs.nixos.url = "nixpkgs/24.05";
+  inputs.nixos.url = "github:NixOS/nixpkgs/nixos-24.11";
 
   outputs = { self, nixos }: {
     nixosConfigurations = {

modules/default/nixos/users.nix

@@ -4,6 +4,7 @@
     isNormalUser = true;
     linger = true;
     description = "willifan";
+    initialPassword = "temp";
     extraGroups = [ "networkmanager" "wheel" "video" ];
     shell = pkgs.bash;
   };