nixos/configuration/Tone.nix

{pkgs, ...}: {
  imports = [./laptop.nix];
  boot.initrd = {
    secrets = {"/crypto_keyfile.bin" = null;};
    luks.devices."luks-761eeb11-3091-4142-9232-4fb33165eccd" = {
      device = "/dev/disk/by-uuid/761eeb11-3091-4142-9232-4fb33165eccd";
      keyFile = "/crypto_keyfile.bin";
    };
  };
  environment = {
    etc."ppp/options".text = ''
      ipcp-accept-remote
    '';
    systemPackages = with pkgs; [openfortivpn];
  };
  services = {
    ollama.enable = true;
    samba.enable = true;
    hardware.bolt.enable = true;
  };
}