nix-config/hosts/common/optional/encrypted-root.nix

{config, ...}: let
  hostname = config.networking.hostName;
in {
  boot.initrd = {
    luks.devices."${hostname}".device = "/dev/disk/by-label/${hostname}_crypt";
  };
}