revert changes, coming back later

This commit is contained in:
nyxerinys 2026-10-01 22:21:06 -05:00
parent 43de558f1a
commit 274512810c

View file

@ -1,10 +1,9 @@
{ pkgs, lib, inputs, ... }: { pkgs, lib, inputs, ... }:
{ {
boot.kernelParams = [ "rd.luks.options=timeout=0,tries=1" ];
boot.initrd = { boot.initrd = {
supportedFilesystems = [ "ext4" "zfs" ]; supportedFilesystems = [ "ext4" "zfs" ];
availableKernelModules = [ "hid_apple" "igc" ]; availableKernelModules = [ "hid_apple" ];
systemd = { systemd = {
enable = true; enable = true;
fido2.enable = true; fido2.enable = true;
@ -25,33 +24,11 @@
crypttabExtraOpts = [ "fido2-device=auto" ]; crypttabExtraOpts = [ "fido2-device=auto" ];
}; };
systemd.services."systemd-cryptsetup@" = {
overrideStrategy = "asDropin";
serviceConfig = {
Restart = "no";
OnFailureJobMode = "fail";
};
};
systemd.services."zfs-import-nix-root" = { systemd.services."zfs-import-nix-root" = {
wants = [ "keys.mount" ]; wants = [ "keys.mount" ];
after = [ "keys.mount" ]; after = [ "keys.mount" ];
}; };
network = {
enable = true;
ssh = {
enable = true;
port = 2222;
hostKeys = [ "/etc/secrets/initrd/ssh_host_ed25519_key" ];
# Use an inline string to prepend the forced systemd command to your key
authorizedKeys = [
''command="${pkgs.systemd}/bin/systemd-tty-ask-password-agent --watch" ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIjed9TzAaS6afEilS6CQAyz7DRJUNeLWGeboB3Ma3Rb remote-fido-unlock''
];
};
};
}; };
systemd.services."zfs-import-nix-main" = { systemd.services."zfs-import-nix-main" = {