{ pkgs, ... }:
{
  boot.loader = {
    efi.canTouchEfiVariables = true;
    grub = {
      enable = true;
      efiSupport = true;
      device = "nodev";
    };
  };

  # otherwise /tmp is on disk. This *may* be problematic as nix
  # builds in /tmp but I think my swap is large enough...
  boot.tmp.useTmpfs = true;

  boot.kernelPackages = pkgs.linuxPackages_6_13;
}