Passphrase-less reboots using kexec under NixOS

Why our reboots now work without manual intervention - despite encryption. And what kexec