Put boot partition on RAID1 device

Create users with empty password on gamepc

machines/gamepc/configuration.nix

@@ -5,30 +5,14 @@
     };
 
     facter.reportPath = ./facter.json;
-
     networking.hostName = "gamepc";
-
+    users.users.pim.password = "";
-    # boot = {
+    users.users.root.password = "";
-    #   loader = {
-    #     systemd-boot.enable = true;
-    #     efi.canTouchEfiVariables = true;
-    #   };
-    # };
 
     boot.loader.grub = {
       enable = true;
       efiSupport = true;
       efiInstallAsRemovable = true;
-      mirroredBoots = [
-        {
-          path = "/boot0";
-          devices = ["nodev"];
-        }
-        {
-          path = "/boot1";
-          devices = ["nodev"];
-        }
-      ];
     };
 
     disko.devices.disk = lib.genAttrs ["0" "1"] (name: {
@@ -37,14 +21,16 @@
       content = {
         type = "gpt";
         partitions = {
+          boot = {
+            size = "1M";
+            type = "EF02"; # for grub MBR
+          };
           ESP = {
-            type = "EF00";
             size = "500M";
+            type = "EF00";
             content = {
-              type = "filesystem";
+              type = "mdraid";
-              format = "vfat";
+              name = "boot";
-              mountpoint = "/boot${name}";
-              mountOptions = ["umask=0077"];
             };
           };
           mdadm = {
@@ -59,16 +45,16 @@
     });
 
     disko.devices.mdadm = {
-      # boot = {
+      boot = {
-      #   type = "mdadm";
+        type = "mdadm";
-      #   level = 1;
+        level = 1;
-      #   metadata = "1.0";
+        metadata = "1.0";
-      #   content = {
+        content = {
-      #     type = "filesystem";
+          type = "filesystem";
-      #     format = "vfat";
+          format = "vfat";
-      #     mountpoint = "/boot";
+          mountpoint = "/boot";
-      #   };
+        };
-      # };
+      };
       raid0 = {
         type = "mdadm";
         level = 0;

nixos/default.nix

@@ -43,11 +43,9 @@
     };
   };
 
-  users = {
+  users.users.pim = {
-    users.pim = {
+    isNormalUser = true;
-      isNormalUser = true;
+    extraGroups = ["wheel" "docker" "input" "wireshark" "dialout"];
-      extraGroups = ["wheel" "docker" "input" "wireshark" "dialout"];
-    };
   };
 
   environment = {