diff --git a/README.md b/README.md
index c5dc70a..3ea4a61 100644
--- a/README.md
+++ b/README.md
@@ -1,3 +1,7 @@
 # nix configuration
 
 Use at your own risk.
+
+## TODO
+
+- Reverse-proxy Hydra via Wireguard tunnel and nginx
diff --git a/hosts/pruflas/default.nix b/hosts/pruflas/default.nix
index 91e0712..7eadbf9 100644
--- a/hosts/pruflas/default.nix
+++ b/hosts/pruflas/default.nix
@@ -69,10 +69,11 @@ in
     acceptTerms = true;
   };
 
-  # Use the GRUB 2 boot loader.
-  boot.loader.grub.enable = true;
-  boot.loader.grub.version = 2;
-  boot.loader.grub.device = "/dev/sda";
+  boot.kernelModules = [ "kvm-intel" ];
+
+  # Use the systemd-boot EFI boot loader.
+  boot.loader.systemd-boot.enable = true;
+  boot.loader.efi.canTouchEfiVariables = true;
 
   swapDevices = [
     {