secure boot

modules/core/packages.nix

@@ -42,5 +42,6 @@ in
     docker # Containerization Platform
     unstable._1password-cli
     unstable._1password-gui
+    sbctl
   ];
 }

modules/core/secure-boot.nix

@@ -0,0 +1,17 @@
+{ inputs, pkgs, lib, ... }:
+{
+  imports = [
+    inputs.lanzaboote.nixosModules.lanzaboote
+  ];
+  
+  boot.loader = {
+    systemd-boot.enable = lib.mkForce false;
+    efi.canTouchEfiVariables = true;
+    efi.efiSysMountPoint = "/boot";
+  };
+  
+  boot.lanzaboote = {
+    enable = true;
+    pkiBundle = "/var/lib/sbctl";
+  };
+}

modules/core/services.nix

@@ -1,4 +1,4 @@
-{ ... }: {
+{ pkgs, ... }: {
   services = {
 
     blueman.enable = true; # Bluetooth Support
@@ -36,4 +36,13 @@
       dates = "weekly";
     };
   };
+
+  xdg.portal = {
+    enable = true;
+    wlr.enable = true;
+    extraPortals = [
+      pkgs.xdg-desktop-portal-wlr
+      pkgs.xdg-desktop-portal-gtk
+    ];
+  };
 }