infra/nix/os/devices/steveej-t14/hw.nix

{ ... }:

let
  stage1Modules =  [
    "aesni_intel"
    "kvm_amd"
    "nvme"
    "nvme_core"

    "thunderbolt"
    "e1000e"
  ];

in
{
  # TASK: new device
  hardware.opinionatedDisk = {
    enable = true;
    encrypted = true;
    diskId = "nvme-SKHynix_HFS001TD9TNI-L2B0B_CJ0AN89731030AV3Q";
  };

  # boot.initrd.availableKernelModules = stage1Modules;
  boot.initrd.kernelModules = stage1Modules;
  boot.extraModprobeConfig = ''
    options kvm_amd nested=1;
  '';
}