diff --git a/nix/modules/machine/bootloader.nix b/nix/modules/machine/bootloader.nix
new file mode 100644
index 0000000..2fefe52
--- /dev/null
+++ b/nix/modules/machine/bootloader.nix
@@ -0,0 +1,18 @@
+{
+  flake.modules.nixos.default.boot = {
+    initrd.availableKernelModules = [
+      "nvme"
+      "xhci_pci"
+      "ahci"
+      "usbhid"
+      "usb_storage"
+      "sd_mod"
+    ];
+    loader.efi.canTouchEfiVariables = true;
+    #TODO: disable for mbp?
+    loader.systemd-boot = {
+      enable = true;
+      configurationLimit = 5;
+    };
+  };
+}