{ ... }:

let
  stage1Modules =  [
    "aesni_intel"
    "kvm-intel"
    "aes_x86_64"

    "virtio_balloon"
    "virtio_scsi"
    "virtio_net"
    "virtio_pci"
    "virtio_ring"
    "virtio"
    "scsi_mod"
  ];

in
{
  # TASK: new device
  hardware.encryptedDisk = {
    enable = true;
    diskId = "scsi-0QEMU_QEMU_HARDDISK_drive-scsi0";
  };

  boot.initrd.availableKernelModules = stage1Modules;
  boot.initrd.kernelModules = stage1Modules;
  boot.extraModprobeConfig = ''
  '';
}