From b89c9af77e4826250b7970ee5cbfafff05300554 Mon Sep 17 00:00:00 2001
From: Fern Garden <mail@fern.garden>
Date: Fri, 19 Sep 2025 14:23:17 +0800
Subject: [PATCH] btrfs on muskduck

---
 hosts/muskduck/default.nix | 78 +++++++++++---------------------------
 1 file changed, 23 insertions(+), 55 deletions(-)

diff --git a/hosts/muskduck/default.nix b/hosts/muskduck/default.nix
index f6245fd..bdaeb3e 100644
--- a/hosts/muskduck/default.nix
+++ b/hosts/muskduck/default.nix
@@ -1,70 +1,38 @@
-{lib, ...}:
-with lib; {
+{
   # Kernel modules.
-  boot.initrd.availableKernelModules = [
-    "xhci_pci"
-    "nvme"
-    "usb_storage"
-    "sd_mod"
-  ];
-
+  boot.initrd.availableKernelModules = ["xhci_pci" "nvme" "usb_storage" "sd_mod"];
   boot.kernelModules = ["kvm-intel"];
 
-  # Enable lanzaboote & secure boot.
-  boot.initrd.systemd.enable = true;
-  boot.loader.systemd-boot.enable = mkForce false;
-  boot.bootspec.enable = true;
-
-  boot.lanzaboote = {
-    enable = true;
-    pkiBundle = "/var/lib/sbctl";
-    settings.timeout = 0;
-  };
+  # Full disk encryption.
+  boot.initrd.luks.devices."nvme0n1p2_crypt".device = "/dev/disk/by-uuid/7196bd89-099f-4e9e-80e5-3d6d555272b1";
 
   # Root filesystem.
   fileSystems."/" = {
-    device = "/dev/disk/by-uuid/63d79656-aa5b-466a-b369-be5eac3f51ab";
-    fsType = "ext4";
+    device = "/dev/disk/by-uuid/bea34866-903b-460e-abff-c817e06891c7";
+    fsType = "btrfs";
+    options = ["subvol=root"];
   };
 
-  boot.initrd.luks.devices."luks-93fa00bc-777f-4359-bad5-880c29faca0d".device = "/dev/disk/by-uuid/93fa00bc-777f-4359-bad5-880c29faca0d";
-
-  # EFI/boot partition.
-  fileSystems."/boot" = {
-    device = "/dev/disk/by-uuid/EBD7-3E1C";
-    fsType = "vfat";
-    options = [
-      "fmask=0077"
-      "dmask=0077"
-    ];
+  # Nix directory.
+  fileSystems."/nix" = {
+    device = "/dev/disk/by-uuid/bea34866-903b-460e-abff-c817e06891c7";
+    fsType = "btrfs";
+    options = ["subvol=nix"];
   };
 
-  # Share Music dir.
-  services.samba = {
-    enable = true;
-    openFirewall = true;
-    settings = {
-      global = {
-        "workgroup" = "FLOCK";
-        "server string" = "muskduck";
-        "netbios name" = "muskduck";
-        "security" = "user";
-      };
-      "Music" = {
-        "path" = "/home/fern/Music";
-        "browseable" = "yes";
-        "read only" = "yes";
-        "guest ok" = "no";
-      };
-    };
+  # Home directory.
+  fileSystems."/home" = {
+    device = "/dev/disk/by-uuid/bea34866-903b-460e-abff-c817e06891c7";
+    fsType = "btrfs";
+    options = ["subvol=home"];
   };
 
-  services.samba-wsdd = {
-    enable = true;
-    openFirewall = true;
+  # Swap.
+  fileSystems."/swap" = {
+    device = "/dev/disk/by-uuid/bea34866-903b-460e-abff-c817e06891c7";
+    fsType = "btrfs";
+    options = ["subvol=swap"];
   };
 
-  flock.docker = {
-    enable = true;
-  };
+  swapDevices = [{device = "/swap/swapfile";}];
 }