1{ config, lib, pkgs, ... }:
2# TODO: make ecryptfs work in initramfs?
3
4with lib;
5
6{
7 config = mkIf (any (fs: fs == "ecryptfs") config.boot.supportedFilesystems) {
8 system.fsPackages = [ pkgs.ecryptfs ];
9 security.wrappers = {
10 "mount.ecryptfs_private".source = "${pkgs.ecryptfs.out}/bin/mount.ecryptfs_private";
11 "umount.ecryptfs_private".source = "${pkgs.ecryptfs.out}/bin/umount.ecryptfs_private";
12 };
13 };
14}