From 6c9cb09a6f90580b1f89606549cb6c3df9cf576e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Motiejus=20Jak=C5=A1tys?= <motiejus@jakstys.lt>
Date: Sun, 23 Jul 2023 16:04:45 +0300
Subject: [PATCH] root unlocking is more restrictive

akin to asking for a password
---
 modules/base/boot/default.nix | 15 +++++++--------
 1 file changed, 7 insertions(+), 8 deletions(-)

diff --git a/modules/base/boot/default.nix b/modules/base/boot/default.nix
index 299fa67..d07d4e0 100644
--- a/modules/base/boot/default.nix
+++ b/modules/base/boot/default.nix
@@ -156,14 +156,13 @@ in {
             ];
             authorizedKeys = cfg.sshUnlock.authorizedKeys;
           };
-          # FIXME vendored change by motiejus
-          #postCommands = ''
-          #  tee -a /root/.profile >/dev/null <<EOF
-          #  if zfs load-key rpool/nixos; then
-          #     pkill zfs
-          #  fi
-          #  exit
-          #  EOF'';
+          postCommands = ''
+            tee -a /root/.profile >/dev/null <<EOF
+            if zfs load-key rpool/nixos; then
+               pkill zfs
+            fi
+            exit
+            EOF'';
         };
       };
     })