{
boot.loader = {
timeout = 1;
grub = {
enable = true;
device = "nodev";
efiSupport = true;
efiInstallAsRemovable = true;
enableCryptodisk = true;
};
}