From e38286919018198020c49f13c81cee0f537fa4f0 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Vili=20Sinerv=C3=A4?= <vili.m.sinerva@gmail.com>
Date: Sat, 31 Aug 2024 16:26:25 +0300
Subject: [PATCH] Enable unlocking LUKS with USB keyfile

---
 machine-confs/helium.nix | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/machine-confs/helium.nix b/machine-confs/helium.nix
index bab3eb5..9dd28de 100644
--- a/machine-confs/helium.nix
+++ b/machine-confs/helium.nix
@@ -82,6 +82,11 @@
   ];
 
   boot = {
+    initrd.luks.devices."luks-f6e1979b-0dee-4ee9-8170-10490019854b" = {
+      keyFileSize = 8192;
+      keyFile = "/dev/disk/by-id/usb-Kingston_DataTraveler_3.0_E0D55EA5741216B0A93E02B3-0:0";
+      fallbackToPassword = true;
+    };
     resumeDevice = "/dev/mapper/luks-f6e1979b-0dee-4ee9-8170-10490019854b";
     kernelParams = [ "resume_offset=44537856" ];