From 138613dc117af5f8e645164ae6cd07189e32e6d0 Mon Sep 17 00:00:00 2001
From: ItsDrike <itsdrike@protonmail.com>
Date: Fri, 13 Sep 2024 21:20:25 +0200
Subject: [PATCH] Enable physlock on resume from hibernation

---
 system/roles/workstation/programs/physlock.nix | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/system/roles/workstation/programs/physlock.nix b/system/roles/workstation/programs/physlock.nix
index 00f3c6d..a853a18 100644
--- a/system/roles/workstation/programs/physlock.nix
+++ b/system/roles/workstation/programs/physlock.nix
@@ -14,11 +14,13 @@ in {
       enable = true;
       lockMessage = "System is locked...";
 
-      # Don't auto-lock the system with physlock, I prefer other (gui) lockers
       # I only use physlock manually in some circumstances
       lockOn = {
+        # Don't auto-lock the system with physlock on suspend, I prefer other (gui) lockers
         suspend = false;
-        hibernate = false;
+        # Do use physlock on resuming from hibernation though, as this just restored RAM,
+        # potentially bypassing the login screen and even initial disk encryption password
+        hibernate = true;
       };
     };
   };