diff --git a/configuration.nix b/configuration.nix
index 4e654e4..cfa381a 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -1,6 +1,8 @@
-_: {
+{ lib, ... }: {
   hardware.raspberry-pi.firmware.enable = true;
   hardware.enableRedistributableFirmware = true;
+  hardware.enableAllHardware = lib.mkForce false;
+  boot.initrd.availableKernelModules."tpm-crb" = lib.mkForce false;
 
   # Enable the OpenSSH daemon
   services.openssh = {