{
  friot = {pkgs, config, ...}: {
    deployment.targetHost = "1.2.3.4";
    deployment.autoLuks = {
      # NOTE: not working on virtualbox deployment
      secretdisk = {
        device     = "/dev/sda";
        passphrase = "foobar";
        autoFormat = true;
        cipher     = "aes-cbc-essiv:sha256";
      };
    };
    networking.zones = {
      net = {
        iface = null;
        ipv4  = null;
      };
      lan = {
        iface = null;
        ipv4  = null;
      };
    };
  };
}