Set up Secure Boot

flake.nix

@@ -28,14 +28,18 @@
       url = "github:Mic92/nix-index-database";
       inputs.nixpkgs.follows = "nixpkgs";
     };
+    lanzaboote = {
+      url = "github:nix-community/lanzaboote/v0.3.0";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
     local-bitwig = {
       url = "path:/home/coolneng/Projects/panacea/assets/bitwig";
       flake = false;
     };
   };
 
-  outputs =
-    { self, nixpkgs, nixos-hardware, agenix, nix-index-database, ... }@inputs:
+  outputs = { self, nixpkgs, nixos-hardware, agenix, nix-index-database
+    , lanzaboote, ... }@inputs:
     let
       system = "x86_64-linux";
 
@@ -61,6 +65,7 @@
           nixos-hardware.nixosModules.lenovo-thinkpad-e14-amd
           agenix.nixosModules.age
           nix-index-database.nixosModules.nix-index
+          lanzaboote.nixosModules.lanzaboote
         ];
         specialArgs = {
           inherit inputs;