nullbox: switch to btrfs module

hosts/nullbox/btrfs-clean.nix

@@ -95,10 +95,11 @@ in
     configuredFileSystems = filterAttrs (k: v: v.btrfs.cleanOnBoot.enable) config.fileSystems;
   in mkIf (configuredFileSystems != { }) {
 
-    assertions = mapAttrsToList (name: values:
-      { assertion = (!(isNull values.btrfs.subvolume));
-        message = "`fileSystems.${name}.btrfs.cleanOnBoot.enabled` is set to true, but `filesystems.${name}.btrfs.subvolume` is not set."; }) configuredFileSystems;
+    # assertions = mapAttrsToList (name: values:
+    #   { assertion = (!(isNull values.btrfs.subvolume));
+    #     message = "`fileSystems.${name}.btrfs.cleanOnBoot.enabled` is set to true, but `filesystems.${name}.btrfs.subvolume` is not set."; }) configuredFileSystems;
 
+    # assertions = [{ assertion = false; message = "btrfs-clean.nix: fix this assertion. look at nixos/modules/system/boot/luksroot preOpenCommands assertion for inspiration."; }];
     boot.initrd.systemd.services = mapAttrs' generateInitrdUnit configuredFileSystems;
 
     boot.initrd.postDeviceCommands = let

hosts/nullbox/luks.nix

@@ -19,7 +19,7 @@ in
         device="/dev/disk/by-uuid/85b5f22e-0fa5-4f0d-8fba-f800a0b41671";
         keyFile = "/key/image.png"; # yes it's literally an image file. bite me
         allowDiscards = true;
-        fallbackToPassword = lib.mkIf (!config.boot.initrd.system.enable) true;
+        fallbackToPassword = true;
         preLVM = true;
       };
     };