overrides: ceph-deploy: dmcrypt: yes separate_journal_disk: yes