LUKS encrypted SSD for NixOS, on Orange Pi 5 Plus.
TODO
# copy closure to another arm64 machine nix-copy-closure --to root@suzu /run/current-system