diff --git a/nixos/disko-config.nix b/nixos/disko-config.nix
index ffb18fc..b942f56 100644
--- a/nixos/disko-config.nix
+++ b/nixos/disko-config.nix
@@ -25,6 +25,13 @@
                 name = "crypted";
                 type = "luks";
                 askPassword = true;
+                settings = {
+                  allowDiscards = true;
+                  crypttabExtraOpts = [
+                    "fido2-device=auto"
+                    "token-timeout=10"
+                  ];
+                };
                 content = {
                   type = "btrfs";
                   extraArgs = ["-L" "nixos" "-f"];
diff --git a/nixos/hardware-configuration.nix b/nixos/hardware-configuration.nix
index 2db6444..fcba692 100644
--- a/nixos/hardware-configuration.nix
+++ b/nixos/hardware-configuration.nix
@@ -8,7 +8,7 @@
 
   boot = {
     initrd = {
-      availableKernelModules = [ "nvme" "xhci_pci" "thunderbolt" "usb_storage" "sd_mod" ];
+      availableKernelModules = [ "nvme" "xhci_pci" "ahci" "usbhid" "thunderbolt" "usb_storage" "sd_mod" ];
       kernelModules = [ ];
     };