{
  lib,
  pkgs,
  ...
}: {
  # Setup keyfile
  boot.initrd.secrets = {"/crypto_keyfile.bin" = null;};

  # Enable swap on luks
  boot.initrd.luks.devices."luks-761eeb11-3091-4142-9232-4fb33165eccd".device = "/dev/disk/by-uuid/761eeb11-3091-4142-9232-4fb33165eccd";
  boot.initrd.luks.devices."luks-761eeb11-3091-4142-9232-4fb33165eccd".keyFile = "/crypto_keyfile.bin";

  environment = {
    etc."ppp/options".text = ''
      ipcp-accept-remote
    '';
    systemPackages = with pkgs; [openfortivpn samba nomachine-client];
  };
  programs.firefox.policies.Homepage.URL = lib.mkForce "https://nucleus.ukaea.uk";
}