{ disko.devices = { disk = { nvme0n1 = { type = "disk"; device = "/dev/disk/by-path/pci-0000:71:00.0-nvme-1"; content = { type = "gpt"; partitions = { ESP = { size = "512M"; type = "EF00"; content = { type = "filesystem"; format = "vfat"; mountpoint = "/boot"; mountOptions = [ "defaults" ]; }; }; encryptedSwap = { size = "4G"; content = { type = "swap"; randomEncryption = true; }; }; luks = { size = "100%"; content = { type = "luks"; name = "crypted"; # disable settings.keyFile if you want to use interactive password entry #passwordFile = "/tmp/secret.key"; # Interactive settings = { allowDiscards = true; #keyFile = "/tmp/secret.key"; }; #additionalKeyFiles = ["/tmp/additionalSecret.key"]; content = { type = "filesystem"; format = "bcachefs"; mountpoint = "/"; }; }; }; }; }; }; }; }; }