Remove mcp.nix/mcpkg.nix, MCP firewall ports, MCNS nameserver, and ~mcp.metacircular.net. Leave LUKS FIDO2. Do not delete /srv/mcp.
17 lines
279 B
Nix
17 lines
279 B
Nix
{ inputs, ... }:
|
|
|
|
{
|
|
imports = [
|
|
./hardware-configuration.nix
|
|
./disk-config.nix
|
|
];
|
|
|
|
config = {
|
|
# FIDO2 LUKS unlock (matches vade setup)
|
|
boot.initrd.luks.devices."crypted".crypttabExtraOpts = [
|
|
"fido2-device=auto"
|
|
"token-timeout=10"
|
|
];
|
|
};
|
|
}
|