From f3bb23f050a3e694d4eeec776f030ad01f5fcef5 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Moritz=20B=C3=B6hme?= <mail@moritzboeh.me>
Date: Wed, 5 Apr 2023 09:03:17 +0200
Subject: [PATCH] feat: add config to unlock luks with yubikey

---
 hosts/nixos-work/hardware-configuration.nix | 2 +-
 modules/profiles/work.nix                   | 8 +++++++-
 2 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/hosts/nixos-work/hardware-configuration.nix b/hosts/nixos-work/hardware-configuration.nix
index 36c3a69..01a0be2 100644
--- a/hosts/nixos-work/hardware-configuration.nix
+++ b/hosts/nixos-work/hardware-configuration.nix
@@ -21,7 +21,7 @@
       options = [ "subvol=@" "compress=zstd" "noatime" ];
     };
 
-  boot.initrd.luks.devices."cryptroot".device = "/dev/disk/by-uuid/1958da8c-d506-49a6-b983-dc8477d25b7c";
+  boot.initrd.luks.devices."enc".device = "/dev/disk/by-uuid/1958da8c-d506-49a6-b983-dc8477d25b7c";
 
   fileSystems."/home" =
     {
diff --git a/modules/profiles/work.nix b/modules/profiles/work.nix
index 5dd46ba..419de6c 100644
--- a/modules/profiles/work.nix
+++ b/modules/profiles/work.nix
@@ -6,7 +6,13 @@
 with lib; {
   my = {
     # config
-    yubikey.enable = true;
+    yubikey = {
+      enable = true;
+      luksSupport = {
+        enable = true;
+        devices = [ "enc" ];
+      };
+    };
     theming = {
       enable = true;
       scheme = "catppuccin-macchiato";