summary refs log tree commit diff stats
path: root/hosts
diff options
context:
space:
mode:
authorsils <sils@sils.li>2023-11-12 16:29:45 +0100
committersils <sils@sils.li>2023-11-12 16:29:45 +0100
commit8fd22bf2c23148bb2de114514512dbd3ffe97b04 (patch)
tree5326ebfcfbd7cae6ff33e88e5673a80de4d9d331 /hosts
parentfeat(u/sils/nixvim): switch to nvim-cmp as coq-nvim is currently broken (diff)
downloadnix-config-8fd22bf2c23148bb2de114514512dbd3ffe97b04.tar.gz
nix-config-8fd22bf2c23148bb2de114514512dbd3ffe97b04.zip
feat(hosts/thinklappi): support unlocking with fido2-device
Diffstat (limited to 'hosts')
-rw-r--r--hosts/thinklappi/basesystem.nix5
1 files changed, 4 insertions, 1 deletions
diff --git a/hosts/thinklappi/basesystem.nix b/hosts/thinklappi/basesystem.nix
index b382038..b718c44 100644
--- a/hosts/thinklappi/basesystem.nix
+++ b/hosts/thinklappi/basesystem.nix
@@ -14,7 +14,10 @@
       systemd.enable = true;
       availableKernelModules = ["xhci_pci" "nvme" "rtsx_pci_sdmmc"];
       kernelModules = [];
-      luks.devices."cryptroot".device = "/dev/disk/by-uuid/6700d662-29a9-4ea5-8ca6-85d42550b3ab";
+      luks.devices."cryptroot" = {
+        crypttabExtraOpts = ["fido2-device=auto"];
+        device = "/dev/disk/by-uuid/6700d662-29a9-4ea5-8ca6-85d42550b3ab";
+      };
     };
     kernelModules = ["kvm-intel"];
     extraModulePackages = [];