# The SSH server of the initramfs, through which the root disk's passphrase is typed at
# boot (ADR 0039, D20), as /etc/dropbear/initramfs/dropbear.conf on the instance's host
# at home. It waits on the home network alone (the tunnel to ramiel isn't up that
# early), on 2222, so its host key never clashes with sshd's in melchior's known_hosts.
#
#   -p 2222              its port
#   -s                   no passwords: melchior's key alone
#   -j -k                no forwarding of any kind
#   -I 300               a connection idle for 5 minutes is closed
#   -c cryptroot-unlock  runs nothing but the unlock, whatever the client asks
DROPBEAR_OPTIONS="-p 2222 -s -j -k -I 300 -c cryptroot-unlock"