many changes

hosts/gpd-win4/hardware-configuration.nix

@@ -4,39 +4,54 @@
     (modulesPath + "/installer/scan/not-detected.nix")
   ];
 
-  boot.loader.systemd-boot.enable = true;
+  boot.loader.systemd-boot = {
+    enable = true;
+    configurationLimit = 5;
+  };
   boot.loader.efi.canTouchEfiVariables = true;
 
-  boot.initrd.kernelModules = [ "amdgpu" "kvm-amd" ];
+  # Use systemd in the initrd
+  boot.initrd.systemd.enable = true;
+
+  # Include fingerprint packages in the initrd so you can unlock LUKS with fingerprint
+  boot.initrd.systemd.packages = [
+    pkgs.fprintd
+    pkgs.libfprint-2-tod1-goodix
+  ];
+
+  boot.initrd.availableKernelModules = [
+    "nvme"
+    "xhci_pci"
+    "thunderbolt"
+    "usbhid"
+    "usb_storage"
+    "sd_mod"
+  ];
+  boot.initrd.kernelModules = [];
+  boot.kernelModules = [ "amdgpu" "kvm-amd" ];
+  boot.extraModulePackages = [];
   hardware.cpu.amd.updateMicrocode = lib.mkDefault true;
 
-  fileSystems."/" =
-    {
-      device = "none";
-      fsType = "tmpfs";
-      options = [ "size=16G" "mode=755" ];
-    };
-  fileSystems."/nix" =
-    {
-      device = "/dev/disk/by-uuid/856e1ebe-832f-422d-8d91-d43a5d852abb";
-      fsType = "f2fs";
-    };
-
-  boot.initrd = {
-    luks.devices."enc" = {
-      crypttabExtraOpts = [ "fido2-device=auto" ];
-      device = "/dev/disk/by-uuid/08897ecb-23ce-4352-a1fc-fa442b9e0f72";
-    };
-    systemd.enable = true;
+  # Ephemeral root on tmpfs
+  fileSystems."/" = {
+    device = "none";
+    fsType = "tmpfs";
+    options = [ "size=16G" "mode=755" ];
   };
 
+  fileSystems."/boot" = {
+    device = "/dev/disk/by-uuid/8BC1-69F5";
+    fsType = "vfat";
+    options = [ "fmask=0022" "dmask=0022" ];
+  };
 
-  fileSystems."/boot" =
-    {
-      device = "/dev/disk/by-uuid/1521-B173";
-      fsType = "vfat";
-      options = [ "fmask=0022" "dmask=0022" ];
-    };
+  fileSystems."/nix" = {
+    device = "/dev/disk/by-uuid/7530231d-afe3-4571-934b-826d7b1702b2";
+    fsType = "f2fs";
+  };
+
+  boot.initrd.luks.devices."luks-1506e138-e941-43e1-a133-06ae3299b62b".device =
+    "/dev/disk/by-uuid/1506e138-e941-43e1-a133-06ae3299b62b";
 
   hardware.graphics = {
     enable = true;