{ config, ... }:

{
  boot = {
    kernelParams = [
      # get an IP address on boot, so we can unlock the root disk remotely
      "ip=dhcp"
      # rotate the screen 90 degree counter clockwise
      "fbcon=rotate:1"
    ];
    initrd = {
      # driver for the NIC, required in order to get an IP address
      kernelModules = [ "r8169" ];
      network = {
        enable = true;
        postCommands = ''
          echo "cryptsetup-askpass; exit" > /root/.profile
        '';
        ssh = {
          enable = true;
          port = 2222;
          hostKeys =
            [ /etc/ssh/ssh_host_ed25519_key /etc/ssh/ssh_host_rsa_key ];
          authorizedKeys =
            config.users.users.fcuny.openssh.authorizedKeys.keys;
        };
      };
    };
  };
}