From 7e815dd5d07e05d6b79cf31385ae5ab776625184 Mon Sep 17 00:00:00 2001
From: Grigory Shipunov
Date: Sun, 23 Apr 2023 01:03:53 +0200
Subject: first stab at secure boot

---
 flake.nix | 7 +++++++
 1 file changed, 7 insertions(+)

(limited to 'flake.nix')

diff --git a/flake.nix b/flake.nix
index a91452f..cd24209 100644
--- a/flake.nix
+++ b/flake.nix
@@ -25,12 +25,18 @@
       url = "github:tmux-plugins/tmux-yank";
       flake = false;
     };
+
+    lanzaboote = {
+      url = "github:nix-community/lanzaboote";
+      inputs.nixpkgs.follows = "nixpkgs-unstable";
+    };
   };
 
   outputs =
     inputs@{ self
     , fenix
     , flake-utils
+    , lanzaboote
     , microvm
     , nixpkgs
     , nixpkgs-unstable
@@ -60,6 +66,7 @@
           specialArgs = { inherit inputs; };
           modules = [
             sops-nix.nixosModules.sops
+            lanzaboote.nixosModules.lanzaboote
 
             ./hosts/toaster
 
-- 
cgit v1.3.1