{
  boot = {
    initrd.availableKernelModules = [
      # "aesni_intel"
      # "cryptd"
      "usb_storage"
    ];

    # <https://wiki.archlinux.org/title/Dm-crypt/System_configuration#Timeout>
    kernelParams = [
      "luks.options=timeout=0"
      "rd.luks.options=timeout=0"
      "rootflags=x-systemd.device-timeout=0"
    ];
  };
}