swarsel/.dotfiles
1
0
Fork 0
mirror of https://github.com/Swarsel/.dotfiles.git synced 2025-12-06 09:07:21 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat: enable yubikey hardware decryption

Browse source
This commit is contained in:
Leon Schwarzäugl 2025-03-25 02:38:23 +01:00
parent a15bd220f4
commit e312a05de0
Signed by: swarsel
GPG key ID: 26A54C31F2A4FD84
2 changed files with 7 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

7
profiles/nixos/optional/work.nix
View file

@ -17,8 +17,11 @@ in
};
boot.initrd = {
systemd.enable = true;
systemd.enable = lib.mkForce true; # make sure we are using initrd systemd even when not using Impermanence
luks = {
# disable "support" since we use systemd-cryptenroll
# make sure yubikeys are enrolled using
# sudo systemd-cryptenroll --fido2-device=auto --fido2-with-user-verification=no --fido2-with-user-presence=true --fido2-with-client-pin=no /dev/nvme0n1p2
yubikeySupport = false;
fido2Support = false;
};
@ -101,7 +104,7 @@ in
openssh = {
enable = true;
extraConfig = ''
'';
'';
};
syncthing = {