update stuff

etcnixos/flake.lock

@@ -316,11 +316,11 @@
     },
     "nixos-hardware": {
       "locked": {
-        "lastModified": 1728056216,
-        "narHash": "sha256-IrO06gFUDTrTlIP3Sz+mRB6WUoO2YsgMtOD3zi0VEt0=",
+        "lastModified": 1728269138,
+        "narHash": "sha256-oKxDImsOvgUZMY4NwXVyUc/c1HiU2qInX+b5BU0yXls=",
         "owner": "NixOS",
         "repo": "nixos-hardware",
-        "rev": "b7ca02c7565fbf6d27ff20dd6dbd49c5b82eef28",
+        "rev": "ecfcd787f373f43307d764762e139a7cdeb9c22b",
         "type": "github"
       },
       "original": {

etcnixos/system-mreow.nix

@@ -32,8 +32,6 @@
       CPU_MAX_PERF_ON_BAT = 60;
 
       CPU_BOOST_ON_BAT = 0;
-      START_CHARGE_THRESH_BAT0 = 80;
-      STOP_CHARGE_THRESH_BAT0 = 90;
       RUNTIME_PM_ON_BAT = "auto";
     };
   };
@@ -100,15 +98,11 @@
 
   system.activationScripts = {
     # extract all my secureboot keys
-    "secureboot-keys".text =
-      let
-        secureboot_path = "/etc/secureboot";
-      in
-      ''
-        #!/bin/sh
-        rm -fr ${secureboot_path} || true
-        mkdir -p ${secureboot_path}
-        ${pkgs.gnutar}/bin/tar xf /etc/nixos/secrets/secureboot.tar -C ${secureboot_path}
-      '';
+    "secureboot-keys".text = ''
+      #!/bin/sh
+      rm -fr ${config.boot.lanzaboote.pkiBundle} || true
+      mkdir -p ${config.boot.lanzaboote.pkiBundle}
+      ${pkgs.gnutar}/bin/tar xf /etc/nixos/secrets/secureboot.tar -C ${config.boot.lanzaboote.pkiBundle}
+    '';
   };
 }