{ pkgs, ... }:
let
  kernel = pkgs.linuxPackages_latest;
in
{
  # Configure bootloader with lanzaboot and secureboot
  boot = {
    kernelModules = [ "nct6775" ];
    loader = {
      systemd-boot.enable = true;

      efi = {
        canTouchEfiVariables = true;
        efiSysMountPoint = "/boot";
      };
    };

    kernelPackages = kernel;

    kernelParams = [
      "quiet"
      "amdgpu.ppfeaturemask=0xffffffff"
    ];

    consoleLogLevel = 3;
    bootspec.enable = true;
  };
}