{ config, lib, ... }:

{
  imports = [ ./minimal.nix ];

  boot.bootspec.enable = true;
  boot.initrd = {
    kernelModules = [ ];
    systemd.enable = true;
  };

  boot.lanzaboote = {
    enable = true;
    pkiBundle = "/var/lib/sbctl";
  };

  boot.loader.efi = {
    canTouchEfiVariables = true;
    efiSysMountPoint = "efi";
  };

  boot.loader.systemd-boot = {
    enable = lib.mkForce false;
    xbootldrMountPoint = "/boot";
  };

  hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;

  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
}