summaryrefslogtreecommitdiff
path: root/system/tpm.nix
diff options
context:
space:
mode:
authorFreya Murphy <freya@freyacat.org>2025-09-11 11:28:39 -0400
committerFreya Murphy <freya@freyacat.org>2025-09-11 11:28:39 -0400
commita5be75577750bf64e16874e4b9b6a6bb092a4fa0 (patch)
treef6918a2667aebeed2869d4137c9ecd6859911e88 /system/tpm.nix
parentupdate commits (diff)
downloaddotfiles-nix-a5be75577750bf64e16874e4b9b6a6bb092a4fa0.tar.gz
dotfiles-nix-a5be75577750bf64e16874e4b9b6a6bb092a4fa0.tar.bz2
dotfiles-nix-a5be75577750bf64e16874e4b9b6a6bb092a4fa0.zip
add tpm support
Diffstat (limited to 'system/tpm.nix')
-rw-r--r--system/tpm.nix14
1 files changed, 14 insertions, 0 deletions
diff --git a/system/tpm.nix b/system/tpm.nix
new file mode 100644
index 0000000..c7507da
--- /dev/null
+++ b/system/tpm.nix
@@ -0,0 +1,14 @@
+{
+ lib,
+ config,
+ ...
+}: let
+ inherit (lib) mkIf;
+in {
+ config = mkIf config.tpm {
+ security.tpm2.enable = true;
+ security.tpm2.pkcs11.enable = true;
+ security.tpm2.tctiEnvironment.enable = true;
+ users.groups.tss.members = [config.user];
+ };
+}