diff --git a/nix/nixos-modules/hwCommon.nix b/nix/nixos-modules/hwCommon.nix
index 69bf723..7895957 100644
--- a/nix/nixos-modules/hwCommon.nix
+++ b/nix/nixos-modules/hwCommon.nix
@@ -56,6 +56,21 @@ in
   config = lib.mkIf cfg.enable {
 
 
+    boot = {
+
+      # TODO adapt better
+      loader = {
+        efi.canTouchEfiVariables = lib.mkDefault true;
+        systemd-boot = {
+          enable = true;
+          editor = lib.mkDefault true; # TODO lockdown (disable this OR enable TPM PCR checks)
+          memtest86.enable = lib.mkDefault true;
+        };
+      };
+
+    };
+
+
     hardware = {
 
       cpu = lib.mkMerge [