nixos/extra/networkdecrypt.nix

{ pkgs, ... }:

{
  boot.initrd.network = {
    enable = true;

    ssh = {
      enable = true;
      port = 2222;
      hostKeys = [
        /etc/secrets/initrd/ssh_host_ed25519_key
      ];
      authorizedKeys = [
        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOFx6OLwL9MbkD3mnMsv+xrzZHN/rwCTgVs758SCLG0h felix@thinkman"
      ];
    };

    postCommands = ''
      echo 'cryptsetup-askpass' >> /root/.profile
    '';
  };
}