tom/nix-config
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity

remove yubi key support, fix fido2 systemd boot

Browse Source
This commit is contained in:
tomoron
2026-07-06 13:28:49 +02:00
parent 38ce579039
commit 5b70399dba
1 changed files with 1 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
osConfigs/hosts/laptop.nix
View File

@ -6,33 +6,17 @@
# By: tomoron <tomoron@student.42angouleme.fr> +#+ +:+ +#+ #
# +#+#+#+#+#+ +#+ #
# Created: 2025/09/06 00:56:57 by tomoron #+# #+# #
# Updated: 2026/06/15 02:11:29 by tomoron ### ########.fr #
# Updated: 2026/07/04 01:59:26 by tomoron ### ########.fr #
# #
# **************************************************************************** #
{ lib, config, pkgs, ... }:
{
services.udev.packages = [ pkgs.yubikey-personalization ];
boot.initrd.kernelModules = [ "vfat" "nls_cp437" "nls_iso8859-1" "usbhid" ];
boot.initrd.systemd.enable = true;
boot.initrd.luks.yubikeySupport = false;
boot.initrd.luks.devices.cryptroot = {
device = "/dev/disk/by-uuid/a4593b01-069d-4a5d-a550-74a762b89b3f";
allowDiscards = true;
#set up initial : https://wiki.nixos.org/wiki/Yubikey_based_Full_Disk_Encryption_(FDE)_on_NixOS
#yubikey = { #bad implementation upstream. unlock with be with fallback password until it's better
# twoFactor = false;
# keyLength = 64;
# saltLength = 32;
# storage = {
# device = "/dev/disk/by-uuid/BA5C-F216";
# path = "/default";
# };
#};
};
boot.blacklistedKernelModules = [ "nvidia" "nvidia_drm" "nvidia_uvm" ]; #speeds up startup, loaded automatically when gpu is started