{
  environment.etc.crypttab = {
    mode = "0600";
    text = ''
      shared PARTUUID=7572b70e-36d1-41a8-b425-540b96092ff6 /dev/null tcrypt,tcrypt-veracrypt,tcrypt-keyfile=/root/shared_keyfile
    '';
  };

  fileSystems."/mounts/shared" =
    { device = "/dev/mapper/shared";
      fsType = "ntfs3";
      options = [ "defaults,exec,nosuid,nodev,prealloc,uid=1000,gid=100" ];
    };

}