From 8fd22bf2c23148bb2de114514512dbd3ffe97b04 Mon Sep 17 00:00:00 2001
From: sils <sils@sils.li>
Date: Sun, 12 Nov 2023 16:29:45 +0100
Subject: feat(hosts/thinklappi): support unlocking with fido2-device

---
 hosts/thinklappi/basesystem.nix | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

(limited to 'hosts/thinklappi')

diff --git a/hosts/thinklappi/basesystem.nix b/hosts/thinklappi/basesystem.nix
index b382038..b718c44 100644
--- a/hosts/thinklappi/basesystem.nix
+++ b/hosts/thinklappi/basesystem.nix
@@ -14,7 +14,10 @@
       systemd.enable = true;
       availableKernelModules = ["xhci_pci" "nvme" "rtsx_pci_sdmmc"];
       kernelModules = [];
-      luks.devices."cryptroot".device = "/dev/disk/by-uuid/6700d662-29a9-4ea5-8ca6-85d42550b3ab";
+      luks.devices."cryptroot" = {
+        crypttabExtraOpts = ["fido2-device=auto"];
+        device = "/dev/disk/by-uuid/6700d662-29a9-4ea5-8ca6-85d42550b3ab";
+      };
     };
     kernelModules = ["kvm-intel"];
     extraModulePackages = [];
-- 
cgit 1.4.1