forest/common/tpm.nix

11 lines
343 B
Nix

{ ... }: {
security.tpm2.enable = true;
security.tpm2.pkcs11.enable = true;
security.tpm2.tctiEnvironment.enable = true;
users.users.ash.extraGroups = [ "tss" ];
users.groups.uhid = {};
users.users.ash.extraGroups = [ "uhid" ];
services.udev.extraRules = ''
KERNEL=="uhid", SUBSYSTEM=="misc", GROUP="uhid", MODE="0660"
'';
}