{...}: { boot.loader.grub.device = "/dev/sda"; constants.sopsFile = ../../common/auths.yaml; security.sudo.wheelNeedsPassword = false; system.stateVersion = "25.11"; zramSwap.enable = true; }