diff --git a/boot/loader/entries/linux-hardened.conf b/boot/loader/entries/linux-hardened.conf
new file mode 100755
index 0000000..cae491e
--- /dev/null
+++ b/boot/loader/entries/linux-hardened.conf
@@ -0,0 +1,5 @@
+title   Arch Linux - Encrypted
+linux   /vmlinuz-linux-hardened
+initrd  /intel-ucode.img
+initrd  /initramfs-linux-hardened.img
+options cryptdevice=PARTUUID=379cfbc1-1611-4d61-ba80-dafac35f1c1a:lvm root=/dev/mapper/vg0-root zswap.enabled=1 zswap.compressor=lz4 zswap.max_pool_percent=20 zswap.zpool=z3fold apparmor=1 security=apparmor intel_pstate=per_cpu_perf_limits intel_pstate=hwp_only quiet rw
diff --git a/boot/loader/entries/arch.conf b/boot/loader/entries/linux-vanilla.conf
similarity index 100%
rename from boot/loader/entries/arch.conf
rename to boot/loader/entries/linux-vanilla.conf
diff --git a/boot/loader/loader.conf b/boot/loader/loader.conf
index 9084478..bf1757c 100755
--- a/boot/loader/loader.conf
+++ b/boot/loader/loader.conf
@@ -1,3 +1,3 @@
-default  arch
+default  linux-hardened
 console-mode max
 editor   no