{ device, memSize ? 1024 * 5, swapSize ? "10G" }:
{
  disko = {
    inherit memSize;

    devices = {
      disk = {
        main = {
          type = "disk";
          inherit device;
          content = {
            type = "gpt";
            partitions = {
              ESP = {
                size = "512M";
                type = "EF00";
                content = {
                  type = "filesystem";
                  format = "vfat";
                  mountpoint = "/boot";
                  mountOptions = [ "defaults" ];
                };
                priority = 1;
              };
              cryptoroot = {
                size = "100%";
                content = {
                  type = "luks";
                  name = "luksroot";
                  settings.allowDiscards = true;
                  passwordFile = "/tmp/secret.key";
                  content = {
                    type = "btrfs";
                    extraArgs = [ "-f" ];
                    subvolumes = {
                      root = {
                        mountpoint = "/";
                        mountOptions = [ "compress=zstd" ];
                      };
                      persistent = {
                        mountpoint = "/persistent";
                        mountOptions = [ "compress=zstd" "noatime" ];
                      };
                      nix = {
                        mountpoint = "/nix";
                        mountOptions = [ "compress=zstd" "noatime" ];
                      };
                      swap = {
                        mountpoint = "/.swapvol";
                        mountOptions = [ "noatime" ];
                        swap.swapfile.size = swapSize;
                      };
                    };
                  };
                };
              };
            };
          };
        };
      };
    };
  };
}