```
boot.initrd.luks = {
  gpgSupport = true;
  devices = {
    luksdisk = {
      device = "/dev/disk/by-partuuid/17089db4-a8dd-42e8-8251-cf1018711b18";
      allowDiscards = true;
      gpgCard = {
        gracePeriod = 15;
        publicKey = ./luks-gpg-key.asc;
        encryptedPass = ./luks-passphrase.asc;
      };
    };
  };
};
```