break out + ssh unlock

modules/hosts/hermes/configuration.nix

@@ -1,6 +1,5 @@
 {
   inputs,
-  config,
   pkgs,
   modules,
   ...
@@ -28,13 +27,20 @@ in
     ./disko.nix
     modules.base
     modules.zfsRoot
-    modules.desktopHyprland
+    modules.luksInitrdSshUnlock
     modules.mailServer
     modules.binBashWrapper
   ];
 
   my.binBashWrapper.enable = true;
 
+  my.initrdSshUnlock = {
+    enable = true;
+    authorizedKeys = [
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICxY7ceahvTqe4AWGKRJNs1z4AdWT/WafkOBDaNrkB2p"
+    ];
+  };
+
   networking.hostName = hostName;
   networking.hostId = "8d49a097f2";
 

modules/hosts/kronos/configuration.nix

@@ -27,6 +27,7 @@ in
     ./disko.nix
     modules.base
     modules.zfsRoot
+    modules.luksTpm2
     modules.desktopHyprland
     modules.binBashWrapper
   ];