{ lib, pkgs, ... }:

{
  boot = {
    kernelParams = [ "fbcon=rotate:1" ];
    kernelPackages = pkgs.linuxPackages_testing;
    tmp.cleanOnBoot = true;
    initrd.systemd.enable = true;
  };

  swapDevices = lib.mkForce [{
    device = "/dev/disk/by-uuid/addae2e4-d7d7-4fcd-b2cb-7635c794d652";
    encrypted = {
      enable = true;
      label = "swap";
      blkDev = "/dev/disk/by-uuid/e5381f7c-fb90-4762-8a27-aa05429893e7";
      keyFile = "/sysroot/var/lib/private/swap_key";
    };
  }];

  fileSystems."/media/µsd".encrypted = {
    enable = true;
    label = "microsd";
    blkDev = "/dev/disk/by-uuid/51ed9e97-06cf-4c54-a71a-c182bb0ced9e";
    keyFile = "/sysroot/var/lib/private/µsd_key";
  };
}