add config (secureboot enabled) for pc

This commit is contained in:
lucy 2026-07-10 17:22:03 +02:00
commit a6d51197c9
2 changed files with 166 additions and 3 deletions

View file

@ -23,6 +23,10 @@
url = "github:mpiorowski/late-sh";
inputs.nixpkgs.follows = "nixpkgs";
};
lanzaboote = {
url = "github:nix-community/lanzaboote/v1.1.0";
inputs.nixpkgs.follows = "nixpkgs";
};
};
outputs =
@ -32,10 +36,11 @@
nix-easyroam,
stylix,
nixvim,
lanzaboote,
...
}:
{
nixosConfigurations.nixos = nixpkgs.lib.nixosSystem {
nixosConfigurations.seele = nixpkgs.lib.nixosSystem {
modules = [
./configuration.nix
./nixvim/nixvim.nix
@ -49,6 +54,42 @@
home-manager.useGlobalPkgs = true;
home-manager.extraSpecialArgs = { inherit inputs; };
}
({ lib, ... }: {
networking.hostName = lib.mkForce "seele";
})
];
};
nixosConfigurations.nerv = nixpkgs.lib.nixosSystem {
modules = [
./configuration.nix
./nixvim/nixvim.nix
lanzaboote.nixosModules.lanzaboote
nix-easyroam.nixosModules.nix-easyroam
stylix.nixosModules.stylix
nixvim.nixosModules.nixvim
home-manager.nixosModules.home-manager
{
home-manager.users.lucy = ./home/home.nix;
home-manager.useUserPackages = true;
home-manager.useGlobalPkgs = true;
home-manager.extraSpecialArgs = { inherit inputs; };
}
lanzaboote.nixosModules.lanzaboote
({ pkgs, lib, ... }: {
networking.hostName = lib.mkForce "nerv";
environment.systemPackages = [
# For debugging and troubleshooting Secure Boot.
pkgs.sbctl
];
boot.loader.systemd-boot.enable = lib.mkForce false;
boot.lanzaboote = {
enable = true;
pkiBundle = "/var/lib/sbctl";
};
})
];
};
};