diff --git a/hosts/Lenni/disko.nix b/hosts/Lenni/disko.nix
index 89316a3..1a2b238 100644
--- a/hosts/Lenni/disko.nix
+++ b/hosts/Lenni/disko.nix
@@ -24,6 +24,8 @@
               content = {
                 type = "luks";
                 name = "cryptroot";
+                settings.allowDiscards = true;
+                passwordFile = "/tmp/secret.key";
                 content = {
                   type = "btrfs";
                   extraArgs = [ "-f" ];