nix-configuration/modules/nixos/system/filesystem/default.nix

{
  lib,
  config,
  namespace,
  ...
}:
let
  cfg = config.${namespace}.filesystem;

  # LUKS partition will decrypt to /dev/mapper/nixos-root
  decryptPart = "nixos-root";
  decryptPath = "/dev/mapper/${decryptPart}";

  # Default mount options for your main partitions
  primaryPartOpts = [
    "compress=zstd"
    (lib.mkIf cfg.discard "discard=async").content
  ];
in
{
  options = {
    ${namespace}.filesystem = {
      enable = lib.mkEnableOption "Enables standard BTRFS subvolumes and parameters.";
      partitions = {
        boot = lib.mkOption {
          type = lib.types.str;
          description = "The ID of your boot partition. Use /dev/disk/by-uuid for best results.";
          default = "";
        };
        luks = lib.mkOption {
          type = lib.types.str;
          description = "The ID of your LUKS partition. Use /dev/disk/by-uuid for best results.";
          default = "";
        };
      };
      discard = lib.mkOption {
        type = lib.types.bool;
        description = "Whether to enable TRIM for SSD and NVMe drives. Defaults to true.";
        default = true;
      };
      swapFile = {
        enable = lib.mkEnableOption "Enables the creation of a swap file.";
        size = lib.mkOption {
          type = lib.types.int;
          description = "The size of the swap file to create in MB (defaults to 8192, or ~8 gigabytes).";
          default = 8192;
        };
      };
    };
  };

  config = lib.mkIf cfg.enable {

    # Check for blank parameters
    assertions = [
      {
        assertion = cfg.partitions.luks != "";
        message = "Please specify a LUKS partition to use as the root filesystem.";
      }
      {
        assertion = cfg.partitions.boot != "";
        message = "Please specify your boot partition.";
      }
    ];
    boot.initrd.luks.devices.${decryptPart} = {
      device = cfg.partitions.luks;
      # Enable TPM auto-unlocking if configured
      crypttabExtraOpts = lib.mkIf config.${namespace}.bootloader.tpm2.enable [ "tpm2-device=auto" ];
    };
    fileSystems = {
      "/" = {
        device = decryptPath;
        fsType = "btrfs";
        options = [ "subvol=@" ] ++ primaryPartOpts;
      };
      "/boot" = {
        device = cfg.partitions.boot;
        fsType = "vfat";
      };
      "/home" = {
        device = decryptPath;
        fsType = "btrfs";
        options = [ "subvol=@home" ] ++ primaryPartOpts;
      };
      "/var/log" = {
        device = decryptPath;
        fsType = "btrfs";
        options = [ "subvol=@log" ] ++ primaryPartOpts;
      };
      "/nix" = {
        device = decryptPath;
        fsType = "btrfs";
        options = [
          "subvol=@nix"
          "noatime"
        ] ++ primaryPartOpts;
      };
      "/swap" = lib.mkIf cfg.swapFile.enable {
        device = decryptPath;
        fsType = "btrfs";
        options = [
          "subvol=@swap"
          "noatime"
          (lib.mkIf cfg.discard "discard=async").content
        ];
      };
    };

    swapDevices = lib.mkIf cfg.swapFile.enable [
      {
        device = "/swap/swapfile";
        size = cfg.swapFile.size;
      }
    ];
  };
}