From fb1d76a0971fb57d102f9d6c4100681bdc0472c4 Mon Sep 17 00:00:00 2001 From: Lily Anderson Date: Mon, 16 Feb 2026 08:36:13 -0600 Subject: [PATCH] added remote unlocking --- modules/hosts/desktop/desktop.nix | 1 + modules/nixosModules/early-remote.nix | 24 ++++++++++++++++++++++++ 2 files changed, 25 insertions(+) create mode 100644 modules/nixosModules/early-remote.nix diff --git a/modules/hosts/desktop/desktop.nix b/modules/hosts/desktop/desktop.nix index 7da0b55..925c862 100644 --- a/modules/hosts/desktop/desktop.nix +++ b/modules/hosts/desktop/desktop.nix @@ -8,6 +8,7 @@ self.nixosModules.localization self.nixosModules.applications self.nixosModules.utilities + self.nixosModules.early ]; }; } diff --git a/modules/nixosModules/early-remote.nix b/modules/nixosModules/early-remote.nix new file mode 100644 index 0000000..e2c03e0 --- /dev/null +++ b/modules/nixosModules/early-remote.nix @@ -0,0 +1,24 @@ +{self, inputs, ...}: { + flake.nixosModules.early = { pkgs, ... }: { + networking = { + useDHCP = false; + dhcpcd.enable = false; + }; + boot.initrd = { + availableKernelModules = [ "r8169" ]; + network = { + enable = true; + udhcpc.enable = true; + ssh = { + enable = true; + port = 222; + hostKeys = [ /etc/secrets/initrd/ssh_host_key ]; + authorizedKeys = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK/zH272jRjJf120mqr6EpKB346Nufq5lKFzFTd0ckAC lily@lily-desktop" ]; + shell = "/bin/cryptsetup-askpass"; + }; + postCommands = ''ip addr''; + }; + }; + + }; +}