cleanup nas I think or something

2025-08-27 12:03:53 -05:00
parent 83f8b3543c
commit 6c6d6325c9
23 changed files with 357 additions and 512 deletions
--- a/modules/nixos/boot/lanzaboote/default.nix
+++ b/modules/nixos/boot/lanzaboote/default.nix
@@ -11,13 +11,21 @@ in
 {
  imports = [ ./options.nix ];
  config = mkIf cfg.enable {
-    boot.lanzaboote = {
-      enable = cfg.enable;
-      pkiBundle = "/etc/secureboot";
-      settings = {
-        console-mode = "max";
+    boot = {
+      loader = {
+        efi = {
+          canTouchEfiVariables = true;
+          efiSysMountPoint = "/boot";
+        };
+      };
+      lanzaboote = {
+        enable = cfg.enable;
+        pkiBundle = "/etc/secureboot";
+        settings = {
+          console-mode = "max";
+        };
+        configurationLimit = cfg.configLimit;
      };
-      configurationLimit = cfg.configLimit;
    };
  };
 }