Secrets to append to the initrd. The attribute name is the path the secret should have inside the initrd, the value is the path it should be copied from (or null for the same path inside and out).
Note that nixos-rebuild switch will generate the initrd also for past generations, so if secrets are moved or deleted you will also have to garbage collect the generations that use those secrets.
Declarations
Type
attribute set of (null or path)Default
{ }Example
{ "/etc/dropbear/dropbear_rsa_host_key" =
./secret-dropbear-key;
}