boot.loader.efi.canTouchEfiVariables = true;

  # this is now disabled
  # boot.loader.systemd-boot.enable = true;

  # this is now enabled again
  boot.loader.grub.enable = true;
  boot.loader.grub.version = 2;
  boot.loader.grub.device = "nodev"; # for EFI-only.
  boot.loader.grub.efiSupport = true;
  boot.loader.grub.extraEntries = ''
    menuentry "Windows 7" {
      chainloader (hd0,3)+1
    }
  '';