From 6660b3a0f5faf99a4359fa4995c55b94c8c15d2c Mon Sep 17 00:00:00 2001
From: Aleksandr Lebedev <alex.lebedev2003@icloud.com>
Date: Fri, 26 Sep 2025 20:53:33 +0200
Subject: [PATCH] 4 hours later

---
 systems/x86_64-linux/stargate/disko.nix | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/systems/x86_64-linux/stargate/disko.nix b/systems/x86_64-linux/stargate/disko.nix
index 906b201..480d9c5 100644
--- a/systems/x86_64-linux/stargate/disko.nix
+++ b/systems/x86_64-linux/stargate/disko.nix
@@ -16,9 +16,11 @@
               "--perf-no_read_workqueue"
               "--perf-no_write_workqueue"
             ];
+            format = {
+              keyFile = "/tmp/secret.key";
+            };
             # https://0pointer.net/blog/unlocking-luks2-volumes-with-tpm2-fido2-pkcs11-security-hardware-on-systemd-248.html
             settings = {
-              keyFile = "/tmp/secret.key";
               crypttabExtraOpts = [
                 "fido2-device=auto"
                 "token-timeout=10"