diff --git a/modules/hardware/common-desktop.nix b/modules/hardware/common-desktop.nix
index a427d18..c0e3d6f 100644
--- a/modules/hardware/common-desktop.nix
+++ b/modules/hardware/common-desktop.nix
@@ -16,13 +16,16 @@ in {
       initrd.supportedFilesystems = ["btrfs"];
       consoleLogLevel = 0;
       initrd.verbose = false;
+      plymouth.enable = true;
       loader = {
-        systemd-boot.enable = true;
         timeout = 3;
         efi.canTouchEfiVariables = true;
+        systemd-boot = {
+          enable = true;
+          editor = false; # do not allow changing kernel parameters
+          consoleMode = "max";
+        };
       };
-
-      plymouth.enable = true;
     };
 
     # Enables DHCP on each ethernet and wireless interface. In case of scripted networking