From e8a507e703a5eae59f509a5ac25d203ac4088814 Mon Sep 17 00:00:00 2001
From: Daniel Frank <git@danielfrank.net>
Date: Thu, 13 Jun 2019 14:05:55 +0200
Subject: [PATCH] encrypt swap device

---
 hardware-configuration.nix | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/hardware-configuration.nix b/hardware-configuration.nix
index 1e710b2..3fba2fd 100644
--- a/hardware-configuration.nix
+++ b/hardware-configuration.nix
@@ -22,8 +22,10 @@
       fsType = "ext4";
     };
 
+  # encrypt the swap device. why not.
+  # needs the UUID of the partition, as the swap id will be lost on every boot.
   swapDevices =
-    [ { device = "/dev/disk/by-uuid/4aa2212c-ecd3-4609-a406-021071b2df0f"; }
+    [ { device = "/dev/disk/by-partuuid/f1251a25-02"; randomEncryption.enable = true; }
     ];
 
   nix.maxJobs = lib.mkDefault 1;