refactor: move non-kernel-related options

configuration.nix

@@ -11,6 +11,7 @@
     pkgs.linux-firmware (pkgs.callPackage ./pkgs/t14s-firmware.nix { })
   ];
 
+  boot.loader.efi.canTouchEfiVariables = false;
   boot.loader.systemd-boot = {
     enable = true;
     extraFiles = {

kernel.nix

@@ -106,10 +106,5 @@ in {
         enableTpm2 = false;
       };
     };
-
-    loader = {
-      systemd-boot.enable = lib.mkForce true;
-      efi.canTouchEfiVariables = false;
-    };
   };
 }