{ config, pkgs, ... }:

{
  boot.loader.systemd-boot.enable = false;
  boot.loader.grub.enable = true;
  boot.loader.grub.efiSupport = true;
  boot.loader.grub.efiInstallAsRemovable = true;
  boot.loader.grub.device = "nodev";
  boot.loader.grub.useOSProber = true;
  boot.loader.grub.configurationLimit = 3;
  boot.kernelPackages = pkgs.linuxPackages_latest;

  # Add custom kernel parameters
  boot.kernelParams = [ "module.sig_unenforce" ];
}
