{
  config,
  lib,
  ...
}:
with lib; let
  cfg = config.local.boot.efi;
in {
  options.local.boot.efi = {
    enable = mkEnableOption "EFI with FAT32 system partition";

    esp = {
      mountpoint = mkOption {
        type = types.enum ["/boot" "/boot/efi"];
        default = "/boot";
      };

      uuid = mkOption {
        type = types.strMatching "[0-9A-F]{4}-[0-9A-F]{4}";
      };
    };

    removable = mkOption {
      type = types.bool;
    };
  };

  config = mkIf cfg.enable {
    boot = {
      initrd.supportedFilesystems = ["vfat"];

      loader = {
        efi = {
          efiSysMountPoint = cfg.esp.mountpoint;
          canTouchEfiVariables = !cfg.removable;
        };

        grub.efiInstallAsRemovable = cfg.removable;
      };
    };

    fileSystems.${cfg.esp.mountpoint} = {
      device = "/dev/disk/by-uuid/${cfg.esp.uuid}";
      fsType = "vfat";
      options = ["noatime" "umask=027" "sync"];
      neededForBoot = true;
    };
  };
}