# Pastebin cA0cjS56
  boot.initrd = {
    availableKernelModules =
      [ "ehci_pci" "ahci" "xhci_pci" "usbhid" "sd_mod" "e1000e" ];
    kernelModules = [ "kvm-intel" ];
    network = {
      enable = true;
      ssh = {
        enable = true;
        port = 2222;
        hostRSAKey = "/etc/dropbear_rsa_host_key";
        authorizedKeys = [ (builtins.readFile ./yubikey.pub) ];
      };
      # truly disgusting
      postCommands = ''
        echo "zfs load-key -a && killall zfs" >> /root/.profile
      '';
    };
  };