Add dropbear

host/montalin.nix

@@ -27,6 +27,32 @@
     [ { device = "/dev/mapper/swap"; }
     ];
 
+
+  boot.loader.timeout = 2;
+  boot.initrd.availableKernelModules = [ "virtio-pci" "e1000e" ];
+  boot.initrd.network = {
+    enable = true;
+    ssh = {
+      enable = true;
+      port = 2222;
+  #    hostECDSAKey = /var/src/secrets/dropbear/ecdsa-hostkey;
+      # this includes the ssh keys of all users in the wheel group, but you can just specify some keys manually
+  #    authorizedKeys = with lib; concatLists (mapAttrsToList (name: user: if elem "wheel" user.extraGroups then user.openssh.authorizedKeys.keys else []) config.users.users);
+      # Key generation with dropbearkey -t <type> -f <output-keyfile>
+      hostRSAKey = /boot/dropbear_rsa_host_key;
+      hostECDSAKey = /boot/dropbear_ecdsa_host_key;
+    };
+    postCommands = ''
+      echo 'cryptsetup-askpass' >> /root/.profile
+    '';
+  };
+  boot.kernelParams = ["ip=::::montalin:eth0:dhcp"];
+
+boot.initrd.postMountCommands = ''
+    ip link set eth0 down
+  '';
+
+
   # Use the systemd-boot EFI boot loader.
   boot.loader.systemd-boot.enable = true;
   boot.loader.efi.canTouchEfiVariables = true;