{
  # boot.loader.grub.enable = true;
  boot.loader.grub.enableCryptodisk = true;
  # boot.initrd.luks.devices."crypted".device = "/dev/vda2";

  # services.btrfs.autoScrub.enable = true;
  # services.btrfs.autoScrub.interval = "weekly";

  disko.devices.disk.vda = {
    device = "/dev/vda";
    type = "disk";
    content = {
      type = "gpt";
      partitions = {
        boot = {
          size = "1M";
          type = "EF02";
        }; # partitions.boot
        luks = {
          size = "100%";
          content = {
            type = "luks";
            name = "crypted";
            extraOpenArgs = [ "--allow-discards" ];
            content = {
              type = "filesystem";
              format = "ext4";
              mountpoint = "/";
            }; # content
          }; # content
        }; # luks.partitions
      }; # partitions
    }; # content
  }; # disko.devices.disk.vda
} # root