add systems

modules/systems/boot/base/nixos.nix

@@ -0,0 +1,6 @@
+{ pkgs, lib, ... }:
+{
+  boot.loader.systemd-boot.configurationLimit = lib.mkDefault 8;
+  boot.kernelPackages = pkgs.linuxPackages_latest;
+  programs.nix-ld.enable = true;
+}

modules/systems/boot/nfs/nixos.nix

@@ -0,0 +1,5 @@
+{
+  boot.supportedFilesystems = [ "nfs" ];
+  programs.fuse.userAllowOther = true;
+  services.rpcbind.enable = true;
+}

modules/systems/boot/secure-boot/meta.nix

@@ -0,0 +1,6 @@
+{ inputs, ... }:
+{
+  description = "Lanzaboote Secure Boot";
+
+  imports.nixos = [ inputs.lanzaboote.nixosModules.lanzaboote ];
+}

modules/systems/boot/secure-boot/nixos.nix

@@ -0,0 +1,17 @@
+{ pkgs, lib, ... }:
+{
+  boot.loader = {
+    systemd-boot.enable = lib.mkForce false;
+    efi = {
+      canTouchEfiVariables = true;
+      efiSysMountPoint = "/boot";
+    };
+  };
+
+  boot.lanzaboote = {
+    enable = true;
+    pkiBundle = "/var/lib/sbctl";
+  };
+
+  environment.systemPackages = [ pkgs.sbctl ];
+}

modules/systems/boot/uefi/nixos.nix

@@ -2,7 +2,6 @@
 {
   boot.loader = {
     systemd-boot.enable = lib.mkDefault true;
-    systemd-boot.configurationLimit = lib.mkDefault 8;
     efi.canTouchEfiVariables = lib.mkDefault true;
   };
 }