diff --git a/modules/system/secure-boot.nix b/modules/system/secure-boot.nix deleted file mode 100644 index 18552cf..0000000 --- a/modules/system/secure-boot.nix +++ /dev/null @@ -1,20 +0,0 @@ -{ lib, ... }: - -{ - # Use Lanzaboote to build signed Unified Kernel Images and shim-compatible boot chain. - boot.lanzaboote = { - enable = true; - pkiBundle = { - name = "nanuqsaurus"; - description = "Secure Boot keys for nanuqsaurus installer ISO"; - }; - }; - - # Ensure systemd-boot is not pulled in by other modules. - boot.loader.systemd-boot.enable = lib.mkForce false; - - boot.loader.efi = { - canTouchEfiVariables = true; - efiSysMountPoint = "/boot"; - }; -}