From 9be3979d7ebfa54d36038f0208582186d5946942 Mon Sep 17 00:00:00 2001
From: Aly Raffauf <aly@raffauflabs.com>
Date: Sun, 13 Oct 2024 15:27:28 -0400
Subject: [PATCH] pacifidlog: use lanzaboote

---
 hosts/pacifidlog/default.nix | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/hosts/pacifidlog/default.nix b/hosts/pacifidlog/default.nix
index b59328c2..72a8fbce 100644
--- a/hosts/pacifidlog/default.nix
+++ b/hosts/pacifidlog/default.nix
@@ -24,14 +24,14 @@
   boot = {
     initrd.systemd.enable = true;
 
-    # lanzaboote = {
-    #   enable = true;
-    #   pkiBundle = "/etc/secureboot";
-    # };
+    lanzaboote = {
+      enable = true;
+      pkiBundle = "/etc/secureboot";
+    };
 
     loader = {
       efi.canTouchEfiVariables = true;
-      systemd-boot.enable = lib.mkForce true;
+      systemd-boot.enable = lib.mkForce false;
     };
   };