From 90dc514a4652e63f3356313a88ce01f4387c23ed Mon Sep 17 00:00:00 2001
From: Richie Cahill <Richie@tmmworkshop.com>
Date: Sat, 16 Nov 2024 13:28:36 -0500
Subject: [PATCH] setting up cleves for muninn

---
 .vscode/settings.json       | 1 +
 systems/muninn/hardware.nix | 4 ++++
 2 files changed, 5 insertions(+)

diff --git a/.vscode/settings.json b/.vscode/settings.json
index aff7e7f..f0bcd0f 100644
--- a/.vscode/settings.json
+++ b/.vscode/settings.json
@@ -31,6 +31,7 @@
     "captivedetect",
     "cgroupdriver",
     "charliermarsh",
+    "cleves",
     "cloudflared",
     "codezombiech",
     "compactmode",
diff --git a/systems/muninn/hardware.nix b/systems/muninn/hardware.nix
index 1310d4d..988f7f5 100644
--- a/systems/muninn/hardware.nix
+++ b/systems/muninn/hardware.nix
@@ -12,6 +12,10 @@
         "usb_storage"
         "sd_mod"
       ];
+      clevis = {
+        enable = true;
+        devices."luks-root-pool-nvme-INTEL_SSDPEKKW256G7_BTPY63820XBH256D-part2".secretFile = /root/key.jwe;
+      };
       kernelModules = [ ];
       luks.devices."luks-root-pool-nvme-INTEL_SSDPEKKW256G7_BTPY63820XBH256D-part2" = {
         device = "/dev/disk/by-id/nvme-INTEL_SSDPEKKW256G7_BTPY63820XBH256D-part2";