first stab at secure boot

1 files changed, 7 insertions, 0 deletions

diff --git a/flake.nix b/flake.nix
index a91452f..cd24209 100644
--- a/flake.nix
+++ b/flake.nix
@@ -25,12 +25,18 @@
       url = "github:tmux-plugins/tmux-yank";
       flake = false;
     };
+
+    lanzaboote = {
+      url = "github:nix-community/lanzaboote";
+      inputs.nixpkgs.follows = "nixpkgs-unstable";
+    };
   };
 
   outputs =
     inputs@{ self
     , fenix
     , flake-utils
+    , lanzaboote
     , microvm
     , nixpkgs
     , nixpkgs-unstable
@@ -60,6 +66,7 @@
           specialArgs = { inherit inputs; };
           modules = [
             sops-nix.nixosModules.sops
+            lanzaboote.nixosModules.lanzaboote
 
             ./hosts/toaster