From d3756ee6463e1f8d9cd7bd9e6ad69e78993ff2d6 Mon Sep 17 00:00:00 2001
From: nyxerinys <nyxerinys5@gmail.com>
Date: Fri, 2 Oct 2026 19:19:50 -0500
Subject: [PATCH] lanzaboote to limine

---
 flake.nix                        |  4 ----
 hosts/apollo/boot/bootloader.nix | 32 ++++++++++++++++++++------------
 2 files changed, 20 insertions(+), 16 deletions(-)

diff --git a/flake.nix b/flake.nix
index af88464..59c3545 100644
--- a/flake.nix
+++ b/flake.nix
@@ -38,10 +38,6 @@
       url = "git+ssh://git@git.nyxerinys.dev:222/nyxerinys/nix-secrets";
       flake = false;
     };
-    lanzaboote = {
-      url = "github:nix-community/lanzaboote/v1.2.0";
-      inputs.nixpkgs.follows = "nixpkgs";
-    };
   };
 
   outputs = { self, nixpkgs, nix-darwin, home-manager, ... } @ inputs:
diff --git a/hosts/apollo/boot/bootloader.nix b/hosts/apollo/boot/bootloader.nix
index 7964a53..56ae3cf 100644
--- a/hosts/apollo/boot/bootloader.nix
+++ b/hosts/apollo/boot/bootloader.nix
@@ -1,20 +1,28 @@
 { inputs, lib, pkgs, ... }:
 
 {
-  imports = [
-    inputs.lanzaboote.nixosModules.lanzaboote
-  ];
-
   boot = {
-    lanzaboote = {
-      enable = true;
-      pkiBundle = "/var/lib/sbctl";
-      autoGenerateKeys.enable = true;
-      autoEnrollKeys.enable = true;
+    loader = {
+      efi.canTouchEfiVariables = true;
+      grub.enable = lib.mkForce false;
+      systemd-boot.enable = lib.mkForce false;
+      limine = {
+        enable = true;
+        resolution = "3840x1080";
+        enableEditor = true;
+        maxGenerations = 11;
+        secureBoot = {
+          enable = true;
+          autoGenerateKeys = true;
+          autoEnrollKeys.enable = true;
+        };
+        extraEntries = ''
+          /Windows
+            protocol: efi
+            path: boot():/EFI/Microsoft/Boot/bootmgfw.efi
+        '';
+      };
     };
-    loader.efi.canTouchEfiVariables = true;
-    loader.grub.enable = lib.mkForce false;
-    loader.systemd-boot.enable = lib.mkForce false;
   };
 
   environment.systemPackages = [ pkgs.sbctl ];