{
  boot.initrd.luks.devices.main.device = "/dev/disk/by-label/cryptmain";

  fileSystems."/" = {
    fsType = "ext4";
    device = "/dev/mapper/main";
    options = ["noatime"];
  };
}