From 6d1245843d8ab5b32d4b9670a27e2be893b9e71f Mon Sep 17 00:00:00 2001
From: Crony Akatsuki <crony@cronyakatsuki.xyz>
Date: Fri, 6 Mar 2026 11:26:15 +0100
Subject: [PATCH] feat: setup secure boot again.

---
 hosts/skadi/configuration.nix | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/hosts/skadi/configuration.nix b/hosts/skadi/configuration.nix
index 622ea96..349b121 100644
--- a/hosts/skadi/configuration.nix
+++ b/hosts/skadi/configuration.nix
@@ -16,16 +16,16 @@
   boot.initrd.systemd.enable = true;
 
   # To explicitly disable systemd-boot, lanzaboote takes care of that.
-  boot.loader.systemd-boot.enable = lib.mkForce true;
+  boot.loader.systemd-boot.enable = lib.mkForce false;
 
   # Bootloader.
-  # boot.lanzaboote = {
-  #   enable = true;
-  #   pkiBundle = "/var/lib/sbctl";
-  #   autoEnrollKeys = {
-  #     enable = true;
-  #   };
-  # };
+  boot.lanzaboote = {
+    enable = true;
+    pkiBundle = "/var/lib/sbctl";
+    # autoEnrollKeys = {
+    #   enable = true;
+    # };
+  };
 
   # Enable aarch64 emulation
   boot.binfmt.emulatedSystems = ["aarch64-linux"];