{...}: {
  boot.loader = {
    systemd-boot.enable = true;
    efi.canTouchEfiVariables = true;
  };

  #loader.grub = {
  #  enable = true;
  #  efiSupport = false;
  #  enableCryptodisk = true;
  #  device = "/dev/sda";
  #};
}