From 1a33104616d51b57733b811e77916a5296868def Mon Sep 17 00:00:00 2001
From: Jakub Stachurski <jakub@wilkuu.xyz>
Date: Mon, 15 Jun 2026 22:39:38 +0200
Subject: tacitus: enable tpm stuff

---
 hosts/tacitus/default.nix | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/hosts/tacitus/default.nix b/hosts/tacitus/default.nix
index 91fa198..ea68490 100644
--- a/hosts/tacitus/default.nix
+++ b/hosts/tacitus/default.nix
@@ -30,6 +30,13 @@
       };
     };
   };
+
+  boot.initrd.systemd.enable = true;
+  users.users.wilkuu.extraGroups = [ "tss" ];
+
+  security.tpm2.enable = true;
+  security.tpm2.pkcs11.enable = true;
+  security.tpm2.tctiEnvironment.enable = true;
   # Networking setup
   networking.hostName = "tacitus";
   services.resolved = {
-- 
cgit v1.3.1