15 lines
389 B
Nix
15 lines
389 B
Nix
{ lib, config, ... }:
|
|
let secretsFile = "/var/lib/luks-secret/key";
|
|
in {
|
|
boot = {
|
|
initrd = {
|
|
luks.devices."nixos" = {
|
|
fallbackToPassword = true;
|
|
keyFile = secretsFile;
|
|
};
|
|
# copy the secret into the additional initramfs. `null` means same path
|
|
secrets."${secretsFile}" = null;
|
|
};
|
|
loader.supportsInitrdSecrets = lib.mkForce true;
|
|
};
|
|
}
|