refactor into modules

nixos/modules/boot/bootloader.nix

@@ -0,0 +1,7 @@
+{ ... }:
+
+{
+  boot.loader.systemd-boot.enable = true;
+  boot.loader.efi.canTouchEfiVariables = true;
+  boot.resumeDevice = "/dev/mapper/luksroot";
+}

nixos/modules/boot/kernel.nix

@@ -0,0 +1,26 @@
+{ ... }:
+
+{
+  boot.extraModprobeConfig = ''
+    options mt7921_common disable_clc=1
+    options atkbd reset=1 softrepeat=1
+    options i8042 nomux=1 reset=1 nopnp=1 kbdreset=1 direct=1 dumbkbd=1
+  '';
+
+  boot.kernelParams = [
+    # CRITICAL FIX: Disable ACPI for i8042 (ASUS BIOS bug workaround)
+    "i8042.noacpi"
+    "i8042.reset=1"
+    "i8042.nomux=1"
+    "i8042.nopnp=1"
+    "atkbd.softrepeat=1"
+    # AMD P-State driver for better power management
+    "amd_pstate=active"
+    "amd_pstate.shared_mem=1"
+    # GPU
+    "amdgpu.gpu_recovery=1"
+    "amdgpu.runpm=0"
+  ];
+
+  boot.kernelModules = [ "usbmon" ];
+}

nixos/modules/boot/tpm.nix

@@ -0,0 +1,6 @@
+{ ... }:
+
+{
+  systemd.tpm2.enable = false;
+  boot.initrd.systemd.tpm2.enable = false;
+}