From c4d6a69837e28eec5fe7a02682de504b5b0288cd Mon Sep 17 00:00:00 2001
From: Shahab Dogar <shahab@dogar.dev>
Date: Mon, 10 Feb 2025 09:02:10 +0500
Subject: [PATCH] feat: NixOS | enable secure-boot on new system

---
 nixos/configuration.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/nixos/configuration.nix b/nixos/configuration.nix
index c734723..37c05a7 100644
--- a/nixos/configuration.nix
+++ b/nixos/configuration.nix
@@ -15,12 +15,12 @@ in {
   boot = {
     loader = {
       # Set this to true on first install. This must be false for secure boot.
-      systemd-boot.enable = true;
+      systemd-boot.enable = lib.mkForce false;
       efi.canTouchEfiVariables = true;
     };
 
     lanzaboote = {
-      enable = false;
+      enable = true;
       pkiBundle = "/var/lib/sbctl";
     };
   };