diff --git a/hosts/rustboro/default.nix b/hosts/rustboro/default.nix
index c1805d6d..e2bf00f0 100644
--- a/hosts/rustboro/default.nix
+++ b/hosts/rustboro/default.nix
@@ -22,9 +22,16 @@
     self.nixosModules.common-wifi-profiles
   ];
 
-  boot.loader = {
-    efi.canTouchEfiVariables = true;
-    systemd-boot.enable = true;
+  boot = {
+    lanzaboote = {
+      enable = true;
+      pkiBundle = "/etc/secureboot";
+    };
+
+    loader = {
+      efi.canTouchEfiVariables = true;
+      systemd-boot.enable = lib.mkForce false;
+    };
   };
 
   environment.variables = {