Please have mercy on my nixos-rebuild times and enable BLK_SED_OPAL in the kernel. Without it, computers with self-encrypting drives (like my ThinkPad) can’t resume from suspend when encryption is enabled.
That kernel option is enabled by default in Fedora, Debian, etc.