nix-config/nixos/_mixins/optional/encrypted-root.nix

{ config, ... }:
let hostname = config.networking.hostName;
in {
  boot.initrd = {
    luks.devices."${hostname}".device = "/dev/disk/by-label/${hostname}_crypt";
  };
}