diff --git a/hosts/mpl/bootloader.nix b/hosts/mpl/bootloader.nix
index 026b424..206598d 100644
--- a/hosts/mpl/bootloader.nix
+++ b/hosts/mpl/bootloader.nix
@@ -1,11 +1,6 @@
 {...}: {
   # TODO: lanzaboote
   boot = {
-    initrd.systemd = {
-      enable = true;
-      enableTpm2 = true;
-    };
-
     loader = {
       efi.canTouchEfiVariables = true;
 
diff --git a/hosts/mpl/disk-config.nix b/hosts/mpl/disk-config.nix
index 345520f..0fb11d0 100644
--- a/hosts/mpl/disk-config.nix
+++ b/hosts/mpl/disk-config.nix
@@ -30,6 +30,7 @@
                   allowDiscards = true;
                   bypassWorkqueues = true;
                 };
+                initrdUnlock = true;
                 passwordFile = "/tmp/luks-pw";
                 content = {
                   type = "btrfs";