stockholm/lass/2configs/ssh-cryptsetup.nix

{ config, ... }:
{
  boot.initrd = {
    network = {
      enable = true;
      ssh = {
        enable = true;
        authorizedKeys = with config.krebs.users; [
          config.krebs.users.lass.pubkey
          config.krebs.users.lass-blue.pubkey
        ];
      };
    };
  };
}