From ff02e60527dca0b83352dd8136565374b003b210 Mon Sep 17 00:00:00 2001
From: Franck Cuny <franck@fcuny.net>
Date: Sun, 25 Jan 2026 11:33:58 -0800
Subject: unlock the disk using the host's TPM

---
 profiles/remote-unlock.nix | 2 --
 1 file changed, 2 deletions(-)

(limited to 'profiles/remote-unlock.nix')

diff --git a/profiles/remote-unlock.nix b/profiles/remote-unlock.nix
index 0e2cb1b..d93bb3f 100644
--- a/profiles/remote-unlock.nix
+++ b/profiles/remote-unlock.nix
@@ -6,7 +6,6 @@
 
   boot.initrd.network = {
     enable = true;
-    postCommands = "echo 'cryptsetup-askpass' >> /root/.profile";
     flushBeforeStage2 = true;
     ssh = {
       enable = true;
@@ -15,7 +14,6 @@
         "/persist/secrets/ssh_host_ed25519_key"
       ];
       authorizedKeys = with adminUser.userinfo.sshPublicKeys; [
-        onepassword
         yubikey-personal-nano
         yubikey-personal-keychain
         yubikey-personal-backup
-- 
cgit v1.2.3