aboutsummaryrefslogtreecommitdiff
path: root/profiles/remote-unlock.nix
diff options
context:
space:
mode:
authorFranck Cuny <franck@fcuny.net>2026-01-25 11:33:58 -0800
committerFranck Cuny <franck@fcuny.net>2026-01-25 11:33:58 -0800
commitff02e60527dca0b83352dd8136565374b003b210 (patch)
tree0b475b1bd84e34437e5712748494ddf471c16e51 /profiles/remote-unlock.nix
parentflake.lock: Update (diff)
downloadinfra-ff02e60527dca0b83352dd8136565374b003b210.tar.gz
unlock the disk using the host's TPM
Diffstat (limited to '')
-rw-r--r--profiles/remote-unlock.nix2
1 files changed, 0 insertions, 2 deletions
diff --git a/profiles/remote-unlock.nix b/profiles/remote-unlock.nix
index 0e2cb1b..d93bb3f 100644
--- a/profiles/remote-unlock.nix
+++ b/profiles/remote-unlock.nix
@@ -6,7 +6,6 @@
boot.initrd.network = {
enable = true;
- postCommands = "echo 'cryptsetup-askpass' >> /root/.profile";
flushBeforeStage2 = true;
ssh = {
enable = true;
@@ -15,7 +14,6 @@
"/persist/secrets/ssh_host_ed25519_key"
];
authorizedKeys = with adminUser.userinfo.sshPublicKeys; [
- onepassword
yubikey-personal-nano
yubikey-personal-keychain
yubikey-personal-backup