nixos-config/system/rainbowdash/secure-boot.nix

14 lines
285 B
Nix

{ config, pkgs, ... }:
{
imports = [ ../../externals/systemd-boot-secure ];
boot = {
loader.systemd-boot-secure = {
enable = true;
signed = true;
signing-key = "/root/secure-boot/db.key";
signing-certificate = "/root/secure-boot/db.crt";
};
};
}