feat: enable fallback initrd systemd for work

SwarselSystems.org

@@ -8325,7 +8325,17 @@ Options that I need specifically at work. There are more options at [[#h:f0b2ea9
       };
     };
 
-    # boot.initrd.luks.yubikeySupport = true;
+    boot.initrd = {
+      systemd.enable = lib.mkForce true; # make sure we are using initrd systemd even when not using Impermanence
+      luks = {
+        # disable "support" since we use systemd-cryptenroll
+        # make sure yubikeys are enrolled using
+        # sudo systemd-cryptenroll --fido2-device=auto --fido2-with-user-verification=no --fido2-with-user-presence=true --fido2-with-client-pin=no /dev/nvme0n1p2
+        yubikeySupport = false;
+        fido2Support = false;
+      };
+    };
+
     programs = {
       zsh.shellInit = ''
         export VSPHERE_USER="$(cat ${config.sops.secrets.vcuser.path})"

profiles/nixos/optional/work.nix

@@ -16,7 +16,14 @@ in
     };
   };
 
-  # boot.initrd.luks.yubikeySupport = true;
+  boot.initrd = {
+    systemd.enable = true;
+    luks = {
+      yubikeySupport = false;
+      fido2Support = false;
+    };
+  };
+
   programs = {
     zsh.shellInit = ''
       export VSPHERE_USER="$(cat ${config.sops.secrets.vcuser.path})"