boot.loader = {
    grub = {
     enable = true;
     version = 2;
     device = "nodev";
     enableCryptodisk = true;
     efiSupport = true;
    };

    # Use the systemd-boot EFI boot loader.
    # systemd-boot.enable = true;
    efi.canTouchEfiVariables = true;
  };