From b8871fe7d168743cc6d5ffcabc6b62c489f61601 Mon Sep 17 00:00:00 2001
From: Petru Paler <petru@paler.net>
Date: Thu, 25 Jul 2024 14:11:01 +0100
Subject: [PATCH] Configure key file for each host, it varies.

---
 common/unattended-encryption.nix | 1 -
 hosts/c1/default.nix             | 1 +
 hosts/c2/default.nix             | 1 +
 hosts/c3/default.nix             | 1 +
 hosts/zippy/default.nix          | 1 +
 5 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/common/unattended-encryption.nix b/common/unattended-encryption.nix
index fae8d58..633aa87 100644
--- a/common/unattended-encryption.nix
+++ b/common/unattended-encryption.nix
@@ -4,6 +4,5 @@
       allowDiscards = true;
       bypassWorkqueues = true;
       keyFileSize = 4096;
-      keyFile = "/dev/sda";
   };
 }
diff --git a/hosts/c1/default.nix b/hosts/c1/default.nix
index d06868f..31af965 100644
--- a/hosts/c1/default.nix
+++ b/hosts/c1/default.nix
@@ -7,5 +7,6 @@
   ];
 
   networking.hostName = "c1";
+  boot.initrd.luks.devices."luksroot".keyFile = "/dev/sda";
   services.tailscaleAutoconnect.authkey = "tskey-auth-kmFvBT3CNTRL-wUbELKSd5yhuuTwTcgJZxhPUTxKgcYKF";
 }
diff --git a/hosts/c2/default.nix b/hosts/c2/default.nix
index ab795cf..9a796aa 100644
--- a/hosts/c2/default.nix
+++ b/hosts/c2/default.nix
@@ -7,5 +7,6 @@
   ];
 
   networking.hostName = "c2";
+  boot.initrd.luks.devices."luksroot".keyFile = "/dev/sda";
   services.tailscaleAutoconnect.authkey = "tskey-auth-kbYnZK2CNTRL-SpUVCuzS6P3ApJiDaB6RM3M4b8M9TXgS";
 }
diff --git a/hosts/c3/default.nix b/hosts/c3/default.nix
index 2c0f4c2..2c0658e 100644
--- a/hosts/c3/default.nix
+++ b/hosts/c3/default.nix
@@ -7,5 +7,6 @@
   ];
 
   networking.hostName = "c3";
+  boot.initrd.luks.devices."luksroot".keyFile = "/dev/sda";
   services.tailscaleAutoconnect.authkey = "tskey-auth-kDNknU5CNTRL-iEGHyo8GDZBCVLaMutJjZBHH7wCuCDyFb";
 }
diff --git a/hosts/zippy/default.nix b/hosts/zippy/default.nix
index 87dc687..b2355cf 100644
--- a/hosts/zippy/default.nix
+++ b/hosts/zippy/default.nix
@@ -7,5 +7,6 @@
   ];
 
   networking.hostName = "zippy";
+  boot.initrd.luks.devices."luksroot".keyFile = "/dev/sdb";
   services.tailscaleAutoconnect.authkey = "tskey-auth-ktKyQ59f2p11CNTRL-ut8E71dLWPXsVtb92hevNX9RTjmk4owBf";
 }