{ ... }:
let
  emptySnapshot = name: "zfs list -t snapshot -H -o name | grep -E '^${name}@blank$' || zfs snapshot ${name}@blank";
in {
  disko.devices = {
    disk = {
      main = {
        device = "/dev/disk/by-id/ata-Samsung_SSD_870_EVO_500GB_S5Y1NJ1R160554B";
        type = "disk";
        content = {
          type = "gpt";
          partitions = {
            esp = {
              type = "EF00";
              name = "ESP";
              size = "512M";
              priority = 1;
              content = {
                type = "filesystem";
                format = "vfat";
                mountpoint = "/efi";
                mountOptions = [ "umask=0077" ];
              };
            };
            swap = {
              name = "swap";
              size = "16G";
              priority = 2;
              content = {
                type = "swap";
                randomEncryption = true;
              };
            };
            boot = {
              name = "bpool";
              size = "4G";
              priority = 3;
              content = {
                type = "zfs";
                pool = "bpool";
              };
            };
            cryptroot = {
              size = "100%";
              priority = 4;
              content = {
                type = "luks";
                name = "cryptroot";
                settings.allowDiscards = true;
                passwordFile = "/tmp/cryptroot.pass";
                additionalKeyFiles = [ "/tmp/cryptroot.key" ];
                content = {
                  type = "zfs";
                  pool = "rpool";
                };
              };
            };
          };
        };
      };
    };
    zpool = {
      bpool = {
        type = "zpool";
        options = {
          ashift = "13";
          autotrim = "on";
          compatibility = "grub2";
        };
        rootFsOptions = {
          acltype = "posixacl";
          atime = "on";
          canmount = "off";
          compression = "lz4";
          devices = "off";
          normalization = "formD";
          relatime = "on";
          xattr = "sa";
          dedup = "off";
        };
        mountpoint = "/boot";
        postCreateHook = emptySnapshot "bpool";

        datasets = {
          nixos = {
            type = "zfs_fs";
            options.mountpoint = "none";
            options.canmount = "off";
            postCreateHook = emptySnapshot "bpool/nixos";
          };
          "nixos/boot" = {
            type = "zfs_fs";
            mountpoint = "/boot";
            options.canmount = "on";
            postCreateHook = emptySnapshot "bpool/nixos/boot";
          };
        };
      };
      rpool = {
        type = "zpool";
        options = {
          ashift = "13";
          autotrim = "on";
          cachefile = "none";
        };
        rootFsOptions = {
          acltype = "posixacl";
          atime = "on";
          canmount = "off";
          compression = "zstd-5";
          dedup = "off";
          dnodesize = "auto";
          normalization = "formD";
          relatime = "on";
          xattr = "sa";
        };
        mountpoint = "/";
        postCreateHook = emptySnapshot "rpool";

        datasets = {
          reserved = {
            type = "zfs_fs";
            options.mountpoint = "none";
            options = {
              canmount = "off";
              refreservation = "20G";
            };
          };
          nixos = {
            type = "zfs_fs";
            # mountpoint = "none";
            options.mountpoint = "none";
            options.canmount = "off";
            postCreateHook = emptySnapshot "rpool/nixos";
          };
          user = {
            type = "zfs_fs";
            options.mountpoint = "none";
            options.canmount = "off";
            postCreateHook = emptySnapshot "rpool/user";
          };
          persistent = {
            type = "zfs_fs";
            options.mountpoint = "none";
            options.canmount = "off";
            postCreateHook = emptySnapshot "rpool/persistent";
          };
          "nixos/root" = {
            type = "zfs_fs";
            mountpoint = "/";
            options.canmount = "noauto";
            postCreateHook = emptySnapshot "rpool/nixos/root";
          };
          "user/home" = {
            type = "zfs_fs";
            mountpoint = "/home";
            options.canmount = "on";
            postCreateHook = emptySnapshot "rpool/user/home";
          };
          "persistent/impermanence" = {
            type = "zfs_fs";
            mountpoint = "/persist";
            options.canmount = "on";
            postCreateHook = emptySnapshot "rpool/persistent/impermanence";
          };
          "persistent/servers" = {
            type = "zfs_fs";
            mountpoint = "/srv";
            options.canmount = "on";
            postCreateHook = emptySnapshot "rpool/persistent/servers";
          };
          "persistent/nix" = {
            type = "zfs_fs";
            mountpoint = "/nix";
            options.canmount = "on";
            postCreateHook = emptySnapshot "rpool/persistent/nix";
          };
          "persistent/secrets" = {
            type = "zfs_fs";
            mountpoint = "/etc/secrets";
            options.canmount = "on";
            postCreateHook = emptySnapshot "rpool/persistent/secrets";
          };
          "persistent/log" = {
            type = "zfs_fs";
            mountpoint = "/var/log";
            options.canmount = "on";
            postCreateHook = emptySnapshot "rpool/persistent/log";
          };
          # "persistent/lxd" = {
          #   type = "zfs_fs";
          #   options.canmount = "noauto";
          #   postCreateHook = emptySnapshot "rpool/persistent/lxd";
          # };
          "persistent/docker" = {
            type = "zfs_fs";
            mountpoint = "/var/lib/docker";
            options.canmount = "on";
            postCreateHook = emptySnapshot "rpool/persistent/docker";
          };
          "persistent/nixos-containers" = {
            type = "zfs_fs";
            mountpoint = "/var/lib/nixos-containers";
            options.canmount = "on";
            postCreateHook = emptySnapshot "rpool/persistent/nixos-containers";
          };
          "persistent/bittorrent" = {
            type = "zfs_fs";
            mountpoint = "/media/bittorrent";
            options.canmount = "on";
            options.atime = "off";
            options.recordsize = "16K";
            options.compression = "lz4";
            postCreateHook = emptySnapshot "rpool/persistent/bittorrent";
          };
          "persistent/libvirt" = {
            type = "zfs_fs";
            mountpoint = "/var/lib/libvirt";
            options.canmount = "on";
            postCreateHook = emptySnapshot "rpool/persistent/libvirt";
          };
          "persistent/libvirt-user" = {
            type = "zfs_fs";
            mountpoint = "/media/libvirt";
            options.canmount = "on";
            postCreateHook = emptySnapshot "rpool/persistent/libvirt-user";
          };
          "persistent/libvirt-user/images" = {
            type = "zfs_fs";
            mountpoint = "/media/libvirt/images";
            options.canmount = "on";
            options.atime = "off";
            options.recordsize = "16K";
            options.compression = "lz4";
            postCreateHook = emptySnapshot "rpool/persistent/libvirt-user/images";
          };
          "persistent/ocis" = {
            type = "zfs_fs";
            mountpoint = "/var/lib/ocis";
            options.canmount = "on";
            options.recordsize = "1M";
            postCreateHook = emptySnapshot "rpool/persistent/ocis";
          };
          # "persistent/podman" = {
          #   type = "zfs_fs";
          #   mountpoint = "/var/lib/podman";
          #   options.canmount = "on";
          #   options.atime = "off";
          #   postCreateHook = emptySnapshot "rpool/persistent/podman";
          # };
          "persistent/postgresql" = {
            type = "zfs_fs";
            mountpoint = "/var/lib/postgresql";
            options.canmount = "on";
            options.recordsize = "16K";
            options.atime = "off";
            options.logbias = "latency";
            postCreateHook = emptySnapshot "rpool/persistent/postgresql";
          };
          vol = {
            type = "zfs_fs";
            options.canmount = "off";
            postCreateHook = emptySnapshot "rpool/vol";
          };
          "vol/podman" = {
            type = "zfs_volume";
            size = "40G";
            options.volblocksize = "16K";
            content = {
              type = "filesystem";
              format = "xfs";
              mountpoint = "/var/lib/containers";
            };
          };
        };
      };
    };
  };
}