diff --git a/nixos/stolas/default.nix b/nixos/stolas/default.nix index db1f640..5b98573 100644 --- a/nixos/stolas/default.nix +++ b/nixos/stolas/default.nix @@ -33,7 +33,7 @@ "sd_mod" ]; luks.devices = { - root = { + crypted = { device = "/dev/disk/by-uuid/81dfbfa5-d578-479c-b11c-3ee5abd6848a"; allowDiscards = true; # TODO lanzaboote + TPM2 unlock with PIN https://www.freedesktop.org/software/systemd/man/251/systemd-cryptenroll.html#--tpm2-with-pin=BOOL