desktop is building I guess, idk, need to start commiting stuff eventually lmao

modules/nixos/boot/lanzaboote/default.nix

@@ -0,0 +1,18 @@
+{ config, lib, namespace, inputs, ... }:
+with lib;
+let
+  cfg = config.${namespace}.bootloader.lanzaboote;
+in
+{
+  imports = [ ./options.nix ];
+  config = mkIf cfg.enable {
+    boot.lanzaboote = {
+      enable = cfg.enable;
+      pkiBundle = "/etc/secureboot";
+      settings = {
+        console-mode = "max";
+      };
+      configurationLimit = cfg.configLimit;
+    };
+  };
+}