From 6328f14438bd3d6e4a39140d17ac73e3e4f49544 Mon Sep 17 00:00:00 2001
From: Filippo Berto <berto.f@protonmail.com>
Date: Thu, 6 Oct 2022 19:18:59 +0200
Subject: [PATCH] TPM on thor

---
 nixos_modules/bertof_user.nix | 2 +-
 thor/configuration.nix        | 2 ++
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/nixos_modules/bertof_user.nix b/nixos_modules/bertof_user.nix
index b3e08c3..5321e0a 100644
--- a/nixos_modules/bertof_user.nix
+++ b/nixos_modules/bertof_user.nix
@@ -1,7 +1,7 @@
 {
   users.users.bertof = {
     isNormalUser = true;
-    extraGroups = [ "network" "networkmanager" "wheel" ];
+    extraGroups = [ "network" "networkmanager" "wheel" "tss" ];
     openssh.authorizedKeys.keys = [
       "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN+zsSWZFFzQKnATCAvtG+iuSm4qkZHjCtHzGa9B/71W"
     ];
diff --git a/thor/configuration.nix b/thor/configuration.nix
index d550b38..813bb7b 100644
--- a/thor/configuration.nix
+++ b/thor/configuration.nix
@@ -15,6 +15,7 @@ with lib; {
           device = "/dev/nvme0n1p2";
           preLVM = true;
           allowDiscards = true;
+          bypassWorkqueues = true;
         };
       };
     };
@@ -168,6 +169,7 @@ with lib; {
   services.teamviewer.enable = true;
 
   security = {
+    tpm2.enable = true;
     rtkit.enable = true;
     pam.services = { autounlock_gnome_keyring.enableGnomeKeyring = true; };
     sudo.extraConfig = ''