{
  config,
  lib,
  pkgs,
  ...
}:

let
  cfg = config.boot.initrd.nix-store-veritysetup;
in
{
  meta.maintainers = with lib.maintainers; [ nikstur ];

  options.boot.initrd.nix-store-veritysetup = {
    enable = lib.mkEnableOption "nix-store-veritysetup";
  };

  config = lib.mkIf cfg.enable {
    assertions = [
      {
        assertion = config.boot.initrd.systemd.dmVerity.enable;
        message = "nix-store-veritysetup requires dm-verity in the systemd initrd.";
      }
    ];

    boot.initrd.systemd = {
      contents = {
        "/etc/systemd/system-generators/nix-store-veritysetup-generator".source =
          "${lib.getExe pkgs.nix-store-veritysetup-generator}";
      };

      storePaths = [
        "${config.boot.initrd.systemd.package}/bin/systemd-escape"
      ];
    };

  };
}