boot.initrd.luks.devices =  [
    {
      name = "root";
      device = "/dev/disk/by-uuid/9a891682-3147-493c-b36d-a0ffe454aeec";
      preLVM = true;
      allowDiscards = true;
    }
  ];

  boot.loader = {
    grub.enable = true;
    grub.version = 2;
    grub.efiSupport = true;
    grub.device = "nodev";
    grub.useOSProber = true;
    grub.enableCryptodisk = true;
    efi.canTouchEfiVariables = true;
    efi.efiSysMountPoint = "/boot/efi";
  };