{ ... }:

{
  hardware.encryptedDisk.enable = true;
  hardware.enableAllFirmware = true;
}