{ ... }:
{
	# init keyfile
	boot.initrd.secrets = {
		"/crypto_keyfile.bin" = null;
	};

	# enable swap on luks
	boot.initrd.luks.devices."luks-4130c26c-7546-42e9-9d61-8f112e244460".device = 
		"/dev/disk/by-uuid/4130c26c-7546-42e9-9d61-8f112e244460";
	boot.initrd.luks.devices."luks-4130c26c-7546-42e9-9d61-8f112e244460".keyFile = 
		"/crypto_keyfile.bin";
}