Daily reminder that your LUKS volumes can be configured to be unlocked with a single tap using any FIDO2 hardware key (with an optional passphrase fallback for which you can use a long diceware).

http://0pointer.net/blog/unlocking-luks2-volumes-with-tpm2-f...

systemd is not required, it just simplifies enrollment.