feat: Initial attempt at tpm setup

machines/levitation/configuration.nix

@@ -63,4 +63,20 @@
 
   # Setup home manager
   home-manager.users.nathan = import ./home.nix;
+
+  # TPM setup
+  security = {
+    tpm2 = {
+      enable = true;
+    };
+  };
+  boot = {
+    initrd = {
+      kernelModules = [ "tpm_crb" ];
+      systemd = {
+        enable = true;
+      };
+    };
+    kernelParams = [ "crypt-pv.luks.options=tpm2-device=auto" ];
+  };
 }

modules/desktop.nix

@@ -15,7 +15,7 @@ with lib; {
         # Configure grub if configured
       })
     (mkIf nc.setupGrub {
-      ## Boot, drivers, and host name
+      # Boot, drivers, and host name
       # Use grub
       boot.loader = {
         grub = {
@@ -32,8 +32,8 @@ with lib; {
           canTouchEfiVariables = false;
         };
       };
-      # Configure audio
     })
+    # Configure audio
     (mkIf nc.audio {
       # Disable normal audio subsystem explicitly
       sound.enable = false;