{ ... }:

{
  hardware.opnionatedDisk.enable = true;
  hardware.opnionatedDisk.encrypted = true;
  hardware.enableAllFirmware = true;
}