nixos-config/system/smolder/boot-config.nix

{ config, pkgs, ... }:
let
  kernel =
    with pkgs;
    buildLinux rec {
      version = "6.12.0-rc1";
      modDirVersion = version;
      extraMeta.branch = "6.12";
      src = fetchFromGitLab {
        domain = "gitlab.collabora.com";
        owner = "hardware-enablement/rockchip-3588";
        repo = "linux";
        rev = "f877edfb4bdb696174f87de9d162d179c03fe57e";
        hash = "sha256-X+UIg62BmE4gtrGvUG7eJj3GiSLxcbQ2N9nJ57lye4w=";
      };
    };
in
{
  hardware.deviceTree.filter = "rk3588-rock-5b.dtb";

  boot = {
    loader.grub.enable = false;
    loader.generic-extlinux-compatible.enable = true;

    kernelPackages = pkgs.linuxPackagesFor kernel;
    tmp.cleanOnBoot = true;
  };

  swapDevices = [
    {
      device = "/dev/disk/by-partuuid/bf3edb8a-e33d-46d7-a916-6d9649621745";
      randomEncryption = {
        enable = true;
        allowDiscards = true;
      };
    }
  ];
}