added stuff

nyx/hosts/epimetheus/encryption.nix

@@ -0,0 +1,19 @@
+{
+  # mildly improves performance for the disk encryption
+  boot.initrd.availableKernelModules = [
+    "aesni_intel"
+    "cryptd"
+    "usb_storage"
+  ];
+
+  boot.initrd.luks.devices."enc" = {
+    # improve performance on ssds
+    bypassWorkqueues = true;
+    keyFileSize = 4096;
+    # the device with the maching id will be searched for the key file
+    keyFile = "/dev/disk/by-id/usb-Generic_Flash_Disk_B314B63E-0:0";
+    preLVM = true;
+    # if keyfile is not there, fall back to cryptsetup password
+    # fallbackToPassword = true; # IMPLIED BY config.boot.initrd.systemd.enable
+  };
+}