diff --git a/nki-home/configuration.nix b/nki-home/configuration.nix
index 788da84..5889874 100644
--- a/nki-home/configuration.nix
+++ b/nki-home/configuration.nix
@@ -32,15 +32,16 @@
   };
   ## Encryption
   # Kernel modules needed for mounting USB VFAT devices in initrd stage
-  boot.initrd.kernelModules = [ "usb_storage" ];
+  boot.initrd.systemd.enable = true;
   boot.initrd.luks.devices = {
     root = {
-      # keyFile = "/dev/disk/by-id/usb-090c___B1608112001295-0:0";
-      # keyFileSize = 4096;
-      fallbackToPassword = true;
       device = "/dev/disk/by-uuid/7c6e40a8-900b-4f85-9712-2b872caf1892";
       preLVM = true;
       allowDiscards = true;
+
+      crypttabExtraOpts = [
+        "fido2-device=auto"
+      ];
     };
   };