feat: Added tpm2

This commit is contained in:
uttarayan21
2025-07-30 15:28:11 +05:30
parent 11697e8671
commit 8fb1b24e88

View File

@@ -1,6 +1,7 @@
{ {
pkgs, pkgs,
lib, lib,
device,
... ...
}: { }: {
imports = [ imports = [
@@ -12,7 +13,13 @@
sops = { sops = {
defaultSopsFile = ../../secrets/secrets.yaml; defaultSopsFile = ../../secrets/secrets.yaml;
defaultSopsFormat = "yaml"; defaultSopsFormat = "yaml";
age.keyFile = "/home/servius/.config/sops/age/keys.txt"; age.keyFile = "/home/${device.user}/.config/sops/age/keys.txt";
};
security.tpm2 = {
enable = true;
pkcs11.enable = true;
tctiEnvironment.enable = true;
}; };
programs = { programs = {
@@ -66,9 +73,9 @@
distributedBuilds = true; distributedBuilds = true;
}; };
users.users.servius = { users.users.${device.user} = {
isNormalUser = true; isNormalUser = true;
extraGroups = ["wheel" "audio" "i2c" "media" "openrazer" "video"]; extraGroups = ["wheel" "audio" "i2c" "media" "openrazer" "video" "tss"];
openssh.authorizedKeys.keyFiles = [ openssh.authorizedKeys.keyFiles = [
../../secrets/id_ed25519.pub ../../secrets/id_ed25519.pub
../../secrets/id_ios.pub ../../secrets/id_ios.pub