enable lanzaboote

1 files changed, 8 insertions, 0 deletions

diff --git a/flake.nix b/flake.nix
index 418cab3..e986e79 100644
--- a/flake.nix
+++ b/flake.nix
@@ -13,6 +13,8 @@
     home-manager.inputs.nixpkgs.follows = "nixpkgs";
     home-manager.url = "github:nix-community/home-manager/release-25.11";
     impermanence.url = "github:nix-community/impermanence";
+    lanzaboote.inputs.nixpkgs.follows = "nixpkgs";
+    lanzaboote.url = "github:nix-community/lanzaboote/v1.0.0";
     mac-app-util.url = "github:hraban/mac-app-util";
     my-go-tools.url = "git+https://code.fcuny.net/x";
     nixos-hardware.url = "github:NixOS/nixos-hardware/master";
@@ -39,6 +41,7 @@
       nur,
       my-go-tools,
       impermanence,
+      lanzaboote,
       ...
     }:
     let
@@ -96,19 +99,24 @@
 
       defaultModules = [
         nixSettings
+        #keep-sorted start
         agenix.nixosModules.age
         disko.nixosModules.disko
         home-manager.nixosModules.home-manager
         impermanence.nixosModules.impermanence
+        lanzaboote.nixosModules.lanzaboote
+        #keep-sorted end
         ./modules/default.nix
       ];
 
       # Default modules for Darwin hosts
       darwinDefaultModules = [
         nixSettings
+        #keep-sorted start
         agenix.darwinModules.age
         home-manager.darwinModules.home-manager
         inputs.mac-app-util.darwinModules.default
+        #keep-sorted end
         ./modules/default-darwin.nix
       ];