{
  config,
  lib,
  ...
}: let
  inherit (lib) mkDefault mkEnableOption;
  cfg = config.unexplrd.boot.secureBoot;
in {
  options.unexplrd.boot.secureBoot.enable =
    mkEnableOption "secure boot support";

  config = {
    boot.loader.systemd-boot.enable = mkDefault (!cfg.enable);
  };
}