{config, lib, pkgs, ...}: {

  fileSystems."/run/secrets" = {
    device = "/dev/disk/by-uuid/545bfd15-0973-4395-9d05-6c4c78a9e45c";
    fsType = "ext4";
    options = ["nofail" "noauto" "ro" "x-systemd.automount"];
  };

}