secure boot in x2100

This commit is contained in:
Luj 2023-08-18 00:08:26 +02:00
parent 4f1cac9935
commit b566081a5b
Signed by: luj
GPG key ID: 6FC74C847011FD83
3 changed files with 243 additions and 6 deletions

View file

@ -10,8 +10,12 @@
../../users/default.nix
];
boot.loader.systemd-boot.enable = true;
boot.loader.efi.canTouchEfiVariables = false;
boot.loader.systemd-boot.enable = lib.mkForce false;
boot.lanzaboote = {
enable = true;
pkiBundle = "/etc/secureboot";
};
networking.hostName = "x2100";
networking.wireless.enable = false;
@ -22,6 +26,8 @@
LIBSEAT_BACKEND = "logind";
};
services.logind.lidSwitch = "suspend";
services.xserver = {
enable = true;
layout = "fr";
@ -56,6 +62,7 @@
environment.systemPackages = with pkgs; [
tailscale
brightnessctl
sbctl
];
services.printing.enable = true;