{ config, pkgs, inputs, ... }:

{
  # SystemD-boot is good enough
  boot.loader.systemd-boot.enable = true;
  boot.loader.efi.canTouchEfiVariables = true;
  systemd.tpm2.enable = false;
}