nixfiles/hosts/zinc/configuration.nix

{ config, pkgs, lib, ... }:

{
  imports =
    [
      ./hardware-configuration.nix
    ];

  # Use the systemd-boot EFI boot loader.
  boot.loader.systemd-boot.enable = true;
  boot.loader.efi.canTouchEfiVariables = true;
  boot.loader.timeout = 0;

  boot.initrd.luks = {
    devices.lvm = {
      device = "/dev/disk/by-uuid/43275d9a-8fe8-4631-bf9c-a95d692b534f";
      bypassWorkqueues = true;
    };
  };

  boot.initrd.network.enable = true;
  boot.initrd.network.ssh = {
    enable = true;
    port = 1022;
    #shell = "/bin/cryptsetup-askpass";
    authorizedKeys = config.users.users.clerie.openssh.authorizedKeys.keys;
    hostKeys = [
      "/var/src/secrets/initrd/ssh_host_ed25519_key"
    ];
  };
  boot.initrd.kernelModules = [
    "igc" # integrated rj45 network interface
    "cdc_ether" # 5G modem via usb
  ];
  boot.kernelParams = [ "ip=dhcp" ];

  boot.initrd.network.wireguard = {
    enable = true;
    ipv6s = [ "2a01:4f8:c0c:15f1::8110/128" ];
    ipv4s = [ "10.20.30.110/32" ];
    privateKeyFile = "/var/src/secrets/wireguard/wg-initrd";
  };

  networking.hostName = "zinc";

  services.wg-clerie = {
    enable = true;
    ipv6s = [ "2a01:4f8:c0c:15f1::8109/128" ];
    ipv4s = [ "10.20.30.109/32" ];
  };

  system.stateVersion = "23.05";
}