Hello everyone 
I use agenix on my devices and so far it’s been great. On my home server, agenix has been using the default host SSH ed25519 key, which is alright but for the fact that this key is included in plaintext in my initrd. (This enables regular SSH access at boot time to provide the disk decryption passphrase.) Instead, I would like to use a dedicated SSH key that is stored on the encrypted part of my disks. But from what I gathered the activation script phase is run before any LUKS-related operations and thus agenix cannot access the key at boot, which is not really convenient as is.
Do you have any idea on this? Thanks