Reinstall inspiron with luks encryption

hosts/inspiron/disko.nix

@@ -0,0 +1,66 @@
+{
+  disko.devices = {
+    disk = {
+      main = {
+        type = "disk";
+        device = "/dev/nvme0n1";
+        content = {
+          type = "gpt";
+          partitions = {
+            ESP = {
+              type = "EF00";
+              size = "512M";
+              content = {
+                type = "filesystem";
+                format = "vfat";
+                mountpoint = "/boot";
+                mountOptions = [ "defaults" ];
+              };
+            };
+            luks = {
+              size = "100%";
+              content = {
+                name = "cryptroot";
+                type = "luks";
+                settings = {
+                  allowDiscards = true;
+                  keyFile = "/dev/disk/by-id/usb-SMI_USB_DISK-0:0";
+                  keyFileSize = 4096;
+                  keyFileTimeout = 5;
+                };
+                additionalKeyFiles = [ "/tmp/secret.key" ];
+                content = {
+                  type = "lvm_pv";
+                  vg = "pool";
+                };
+              };
+            };
+          };
+        };
+      };
+    };
+    lvm_vg = {
+      pool = {
+        type = "lvm_vg";
+        lvs = {
+          swap = {
+            size = "20G";
+            content = {
+              type = "swap";
+              resumeDevice = true;
+            };
+          };
+          root = {
+            size = "100%FREE";
+            content = {
+              type = "filesystem";
+              format = "ext4";
+              mountpoint = "/";
+              mountOptions = [ "defaults" ];
+            };
+          };
+        };
+      };
+    };
+  };
+}

hosts/inspiron/hardware.nix

@@ -1,26 +1,20 @@
+{ inputs, ... }:
 {
-  fileSystems."/" = {
+  imports = [
-    device = "/dev/disk/by-uuid/92437114-de06-4a78-9ee3-c7d0ffcabf95";
+    inputs.disko.nixosModules.default
-    fsType = "ext4";
+    ./disko.nix
-  };
+  ];
-
-  fileSystems."/boot" = {
-    device = "/dev/disk/by-uuid/D8B4-1218";
-    fsType = "vfat";
-  };
-
-  swapDevices = [ { device = "/dev/disk/by-uuid/1eba93d1-4853-4534-8cfd-5c14e29c6ff6"; } ];
 
   nixpkgs.hostPlatform = "x86_64-linux";
   hardware.enableRedistributableFirmware = true;
   hardware.cpu.amd.updateMicrocode = true;
   boot.kernelModules = [ "kvm-amd" ];
+boot.initrd.kernelModules = [ "usb_storage" ];
   boot.initrd.availableKernelModules = [
     "nvme"
     "xhci_pci"
     "ahci"
-    "usb_storage"
+        "sd_mod"
-    "sd_mod"
   ];
 
   zramSwap.enable = true;

modules/system/syncthing.nix

@@ -16,7 +16,7 @@
       settings = {
         devices = {
           north.id = "ROS2S76-ULQWVFC-7KNQQ6Q-MNIWNKT-2QOPPHY-FFQZNVM-GUJRTHE-NZBM3QY";
-          inspiron.id = "GUXHL6J-J2HWYNN-7JZJ5CN-6LPYGJD-H7GYRLQ-ORZ4PJJ-5K4WT7I-MELMIQO";
+          inspiron.id = "K7V6PJV-3HLR6FI-VTFRJRN-ECG2ZYI-TNT4F5G-2WVQBDW-S77CHYL-VCAATAV";
         };
 
         folders =