Add luks encrypted fs

machines/hermes/hardware.nix

@@ -1,28 +1,31 @@
 { config, lib, pkgs, modulesPath, ... }:
 
 {
-  imports =
-    [ (modulesPath + "/installer/scan/not-detected.nix")
-    ];
+  imports = [ (modulesPath + "/installer/scan/not-detected.nix") ];
 
-  boot.initrd.availableKernelModules = [ "xhci_pci" "nvme" "usb_storage" "sd_mod" ];
-  boot.initrd.kernelModules = [ ];
+  boot.initrd.availableKernelModules =
+    [ "xhci_pci" "nvme" "usb_storage" "sd_mod" ];
+  boot.initrd.kernelModules = [ "dm-snapshot" ];
   boot.kernelModules = [ "kvm-intel" ];
   boot.extraModulePackages = [ ];
 
-  fileSystems."/" =
-    { device = "/dev/disk/by-uuid/e39690f0-4026-4571-969f-493efa0d1c96";
-      fsType = "ext4";
-    };
+  boot.initrd.luks.devices.luksroot = {
+    device = "/dev/disk/by-uuid/4b886807-3e19-437c-84bb-c2dd766fc19b";
+    allowDiscards = true;
+  };
 
-  fileSystems."/boot" =
-    { device = "/dev/disk/by-uuid/B2C8-621E";
-      fsType = "vfat";
-    };
+  fileSystems."/" = {
+    device = "/dev/disk/by-uuid/48d2e958-00a0-47fa-8c32-9aec031f6098";
+    fsType = "ext4";
+  };
+
+  fileSystems."/boot" = {
+    device = "/dev/disk/by-uuid/D387-B640";
+    fsType = "vfat";
+  };
 
   swapDevices =
-    [ { device = "/dev/disk/by-uuid/0933f280-888d-4eff-9274-a515bcccca4e"; }
-    ];
+    [{ device = "/dev/disk/by-uuid/92c35fa7-2d2e-4172-abaf-4c81599782f1"; }];
 
   powerManagement.cpuFreqGovernor = lib.mkDefault "powersave";
 }

overlays/g810-led/default.nix

@@ -41,7 +41,7 @@ stdenv.mkDerivation rec {
     inherit (src.meta) homepage;
     license = licenses.gpl3;
     platforms = platforms.linux;
-    maintainers = with maintainers; [ samuelgrf ];
+    maintainers = with maintainers; [ davegallant ];
   };
 }