encrypt ssh private keys with the tpm

This commit is contained in:
cswimr 2024-12-03 16:40:01 -05:00
parent 0291524082
commit d5db083507
Signed by: cswimr
GPG key ID: 0EC431A8DA8F8087
3 changed files with 16 additions and 0 deletions

9
nixos/tpm.nix Normal file
View file

@ -0,0 +1,9 @@
{ user, ... }:
{
security.tpm2 = {
enable = true;
pkcs11.enable = true;
tctiEnvironment.enable = true;
};
users.users.${user}.extraGroups = [ "tss" ];
}