{...}: {
  # TASK: new device
  hardware.encryptedDisk = {
    enable = true;
    diskId = "mmc-SL32G_0x259093f6";
  };
}