_: {
  # TASK: new device
  hardware.encryptedDisk = {
    enable = true;
    diskId = "ata-KINGSTON_SV100S2128G_08BAB0020855";
  };
}