foo.nix

    boot.initrd.luks.devices =
                let raidD = part: {
                name = part ++ "_crypt";
                device = "/dev/" ++ part;
                keyFile = "/dev/nvme_luks/keyfile";
                preLVM = false;
                };
              in [
                {
                  name = "nvme_luks";
                  device = "/dev/disk/by-uuid/SOMEUUID";
                  preLVM = true;
                  allowDiscards = true;
                }
              ] ++ (map raidD ["sda1" "sdb1" "sdc1" "sdd1" "sde1" "sdf1" "sdg1" "sdh1" "sdi1" "sdj1" "sdk1"]);