This flake provides the necessary functions to set up a LUKS device with YubiKey based authentication on NixOS, plus a script to facilitate the process.
This is not a guide, please refer to the wiki and the accompanying repo.
This flake provides:
- The following packages:
hextorbrbtohexluks-setupluks-unlock
- An overlay with all the packages in the top level
- A devShell with all the packages plus cryptsetup, openssl, parted and yubikey-personalization
The default values for the scripts are the ones used in the guide.