{
  lib,
  ...
}:
{
  _class = "nixos";

  boot.loader = {
    systemd-boot.enable = true;
    efi = {
      canTouchEfiVariables = true;
      efiSysMountPoint = "/boot";
    };
    grub.enable = false;
  };
  fileSystems."/boot" = {
    fsType = "vfat";
    device = lib.mkDefault "/dev/sda1";
    options = [
      "fmask=0022"
      "dmask=0022"
    ];
  };
}