diff --git a/hosts/nas/boot.nix b/hosts/nas/boot.nix
index 6439577..bf1c280 100755
--- a/hosts/nas/boot.nix
+++ b/hosts/nas/boot.nix
@@ -17,15 +17,15 @@ in
         canTouchEfiVariables = true;
         efiSysMountPoint = "/boot";
       };
+    };
 
-      lanzaboote = {
-        enable = true;
-        pkiBundle = "/etc/secureboot";
-        settings = {
-          console-mode = "max";
-        };
-        configurationLimit = configLimit;
+    lanzaboote = {
+      enable = true;
+      pkiBundle = "/etc/secureboot";
+      settings = {
+        console-mode = "max";
       };
+      configurationLimit = configLimit;
     };
 
     kernel.sysctl = {