From 9d089208a76e4dcdb6e999abdf455ae29fc69173 Mon Sep 17 00:00:00 2001
From: Simon Gardling <titaniumtown@proton.me>
Date: Wed, 4 Jun 2025 21:08:01 -0700
Subject: [PATCH] Revert "disable secureboot"

This reverts commit c017cfb33dc70e564fd805958dafd4730aa1ad78.
---
 etcnixos/system-mreow.nix | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/etcnixos/system-mreow.nix b/etcnixos/system-mreow.nix
index d839fa7..87da6e4 100644
--- a/etcnixos/system-mreow.nix
+++ b/etcnixos/system-mreow.nix
@@ -56,7 +56,7 @@
 
   boot = {
     lanzaboote = {
-      enable = false;
+      enable = true;
       # TODO: proper secrets management so this is not stored in nix store
       pkiBundle = "/var/lib/sbctl";
     };
@@ -69,8 +69,7 @@
         generated at installation time. So we force it to false
         for now.
       */
-      # systemd-boot.enable = lib.mkForce false;
-      systemd-boot.enable = true;
+      systemd-boot.enable = lib.mkForce false;
     };
   };