infra/nix/os/profiles/removable-medium/hw.nix

{ ... }:

{
  hardware.opnionatedDisk.enable = true;
  hardware.opnionatedDisk.encrypted = true;
  hardware.enableAllFirmware = true;
}