diff --git a/hw/orion/default.nix b/hw/orion/default.nix
index 8b56261..1abcaa3 100644
--- a/hw/orion/default.nix
+++ b/hw/orion/default.nix
@@ -10,12 +10,6 @@
   ];
 
   config = {
-    # FIDO2 LUKS unlock (matches vade setup)
-    boot.initrd.luks.devices."crypted".crypttabExtraOpts = [
-      "fido2-device=auto"
-      "token-timeout=10"
-    ];
-
     # Allow rootless containers (Podman) to bind port 53 for CoreDNS (MCNS precursor).
     boot.kernel.sysctl."net.ipv4.ip_unprivileged_port_start" = 53;