{
  config,
  lib,
  pkgs,
  ...
}:
let
  inherit (lib) mkMerge;

  boot = "cb03cf78-715e-4030-ba82-189ff8897eaf";
  esp = "4E4C-1139";
  luks = "0cf52ea1-16d1-4dec-a69a-bdac82bbcf25";
  cryptroot = "6fb9ce3c-c870-4eb7-8199-6536ff898701";
in
{
  config = mkMerge [
    {
      boot.bootspec.enable = true;
      boot.initrd = {
        kernelModules = [ ];
        systemd.enable = true;
      };

      boot.lanzaboote = {
        enable = true;
        pkiBundle = "/var/lib/sbctl";
      };

      boot.loader.efi = {
        canTouchEfiVariables = true;
        efiSysMountPoint = "efi";
      };

      boot.loader.systemd-boot = {
        enable = lib.mkForce false;
        xbootldrMountPoint = "/boot";
      };
    }
  ];
}