{
  ...
}:
{
  ## Configure boot loader
  boot.loader = {
    # Use grub without NVRAM
    grub = {
      enable = true;
      efiSupport = true;
      device = "nodev";
      efiInstallAsRemovable = true;
      useOSProber = true;
    };
    # Do not edit NVRAM
    efi.canTouchEfiVariables = false;
  };
}