path: root/hosts/common/system/boot-ssh.nix

{ config, lib, pkgs, ... }:

{
  boot.initrd = {
    network = {
      enable = true;
      postCommands = ''
        echo "cryptsetup-askpass; exit" > /root/.profile
      '';
      ssh = {
        enable = true;
        port = 2222;
        hostKeys = [
          /etc/ssh/ssh_host_ed25519_key
          /etc/ssh/ssh_host_rsa_key
        ];
        authorizedKeys = config.users.users.fcuny.openssh.authorizedKeys.keys;
      };
    };
  };
}