{ inputs, ... }:

{
  imports = [
    ./hardware-configuration.nix
    ./disk-config.nix
  ];

  config = {
    # FIDO2 LUKS unlock (matches vade setup)
    boot.initrd.luks.devices."crypted".crypttabExtraOpts = [
      "fido2-device=auto"
      "token-timeout=10"
    ];
  };
}