{ ... }:

{
  boot.loader.systemd-boot.enable = true;
  boot.loader.efi.canTouchEfiVariables = true;

  boot.plymouth.enable = true;

  boot.initrd.systemd.enable = true;

  boot.kernelParams = [
    "quiet"
    "splash"
  ];

  boot.consoleLogLevel = 3;
  boot.initrd.verbose = false;

  boot.initrd.luks.devices."cryptroot" = {
    device = "/dev/disk/by-partlabel/luks";
  };

  fileSystems."/".device = "/dev/mapper/cryptroot";
}