From 8f967ab44850cd5b87e703dc6a626bda65de3b3f Mon Sep 17 00:00:00 2001
From: Tim Schubert <dadada@dadada.li>
Date: Sat, 26 Jul 2025 13:43:39 +0200
Subject: [PATCH] feat(stolas): enable TPM2 LUKS keyslot

---
 nixos/stolas/default.nix | 2 ++
 nixos/stolas/disks.nix   | 2 --
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/nixos/stolas/default.nix b/nixos/stolas/default.nix
index e1f115b..3c72921 100644
--- a/nixos/stolas/default.nix
+++ b/nixos/stolas/default.nix
@@ -32,6 +32,8 @@
         "usb_storage"
         "sd_mod"
       ];
+      # Ensure that TPM module is loaded
+      kernelModules = [ "tpm" ];
     };
   };
 
diff --git a/nixos/stolas/disks.nix b/nixos/stolas/disks.nix
index 5d48d17..587d0d3 100644
--- a/nixos/stolas/disks.nix
+++ b/nixos/stolas/disks.nix
@@ -30,10 +30,8 @@
               content = {
                 type = "luks";
                 name = "crypted";
-                #passwordFile = "/tmp/secret.key"; # Interactive
                 settings = {
                   allowDiscards = true;
-                  #keyFile = "/tmp/secret.key";
                 };
                 #additionalKeyFiles = [ "/tmp/additionalSecret.key" ];
                 content = {