{ config, lib, pkgs, ... }: { fileSystems."/run/secrets" = { device = "/dev/disk/by-uuid/545bfd15-0973-4395-9d05-6c4c78a9e45c"; fsType = "ext4"; options = [ "nofail" "noauto" "ro" "x-systemd.automount" ]; }; }