{
  boot.initrd.kernelModules = [ "usb_storage" ];
  boot.initrd.luks.devices."luksroot" = {
      allowDiscards = true;
      bypassWorkqueues = true;
      keyFileSize = 4096;
      keyFile = "/dev/sda";
  };
}