{
  config,
  pkgs,
  ...
}:
let
  kernel = pkgs.cachyosKernels.linuxPackages-cachyos-latest-lto-zen4;
  pkgsVersion = pkgs; # .unstable;
in
{
  # Configure bootloader with lanzaboot and secureboot
  boot = {
    kernelModules = [
      "nct6775"
      "kvm-amd"
      "i2c-dev"
      "ddcci_backlight"
      "k10temp"
    ];
    extraModulePackages = [ config.boot.kernelPackages.ddcci-driver ];
    loader = {
      efi = {
        canTouchEfiVariables = true;
        efiSysMountPoint = "/boot";
      };
    };

    initrd = {
      verbose = false;
      systemd.enable = true;
      availableKernelModules = [
        "xhci_pci"
        "nvme"
        "ahci"
        "usbhid"
        "uas"
        "usb_storage"
        "sd_mod"
      ];

    };

    kernelPackages = kernel;

    kernelParams = [
      # needed cause ssd powersaving is broken af I guess
      "nvme_core.default_ps_max_latency_us=0"
      "pcie_aspm=off"
    ];

    consoleLogLevel = 3;
    bootspec.enable = true;

    binfmt.emulatedSystems = [ "aarch64-linux" ]; # --argstr system aarch64-linux
  };

  nixpkgs.crossSystem.system = "aarch64-linux";

  environment = {
    etc."clevis/disk.jwe".source = ./disk.jwe;
    systemPackages = with pkgsVersion; [
      edk2-uefi-shell
    ];
  };
}