feat(security): disable TPM2 support in nixtee1

- Disabled `security.tpm2.enable` and `security.tpm2.abrmd.enable` options.
- Ensures TPM2-related services are not active on the system for this configuration.
This commit is contained in:
Harald Hoyer 2025-11-14 07:44:38 +01:00
parent 5b0cab98d5
commit 43f72bf1ad

View file

@ -13,6 +13,9 @@
boot.loader.grub.device = "/dev/vda";
boot.loader.grub.useOSProber = true;
security.tpm2.enable = false;
security.tpm2.abrmd.enable = false;
metacfg = {
base.enable = true;
nix-ld.enable = true;