From bab0f4646c4c4976351aba86d28712f4bbd903bf Mon Sep 17 00:00:00 2001
From: Nathan Reiner <nathan@nathanreiner.xyz>
Date: Sun, 7 Jun 2026 21:31:29 +0200
Subject: workstation: add fido2 as decrypt option

---
 hosts/workstation/hardware.nix | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'hosts/workstation/hardware.nix')

diff --git a/hosts/workstation/hardware.nix b/hosts/workstation/hardware.nix
index 2f91bf3..f269582 100644
--- a/hosts/workstation/hardware.nix
+++ b/hosts/workstation/hardware.nix
@@ -45,8 +45,11 @@ modulesPath,
 		fsType = "btrfs";
 	};
 
+
+	boot.initrd.systemd.fido2.enable = true;
 	boot.initrd.luks.devices."root" = {
 		device = "/dev/disk/by-uuid/df2e1c34-093a-4678-9665-8c96ca42b1a2";
+		fido2.credential = "d7781e5de35346aaafe23ca49f13332a";
 	};
 
 	fileSystems."/boot" = {
-- 
cgit v1.2.3-70-g09d2