{
  boot.loader.grub = {
    enable = true;
    device = "/dev/vda";
    enableCryptodisk = true;
  };

  disko.devices.disk.vda = {
    device = "/dev/vda";
    type = "disk";
    content = {
      type = "gpt";
      partitions = {
        boot = {
          size = "1M";
          type = "EF02";
        }; # partitions.boot
        luks = {
          size = "100%";
          content = {
            type = "luks";
            name = "crypted";
            extraOpenArgs = [ "--allow-discards" ];
            content = {
              type = "filesystem";
              format = "ext4";
              mountpoint = "/";
            };
          };
        };
      }; # partitions
    }; # content
  }; # disko.devices.disk.vda
} # root