lanzaboote to limine

flake.nix

@@ -38,10 +38,6 @@
       url = "git+ssh://git@git.nyxerinys.dev:222/nyxerinys/nix-secrets";
       flake = false;
     };
-    lanzaboote = {
-      url = "github:nix-community/lanzaboote/v1.2.0";
-      inputs.nixpkgs.follows = "nixpkgs";
-    };
   };
 
   outputs = { self, nixpkgs, nix-darwin, home-manager, ... } @ inputs:

hosts/apollo/boot/bootloader.nix

@@ -1,20 +1,28 @@
 { inputs, lib, pkgs, ... }:
 
 {
-  imports = [
-    inputs.lanzaboote.nixosModules.lanzaboote
-  ];
-
   boot = {
-    lanzaboote = {
+    loader = {
-      enable = true;
+      efi.canTouchEfiVariables = true;
-      pkiBundle = "/var/lib/sbctl";
+      grub.enable = lib.mkForce false;
-      autoGenerateKeys.enable = true;
+      systemd-boot.enable = lib.mkForce false;
-      autoEnrollKeys.enable = true;
+      limine = {
+        enable = true;
+        resolution = "3840x1080";
+        enableEditor = true;
+        maxGenerations = 11;
+        secureBoot = {
+          enable = true;
+          autoGenerateKeys = true;
+          autoEnrollKeys.enable = true;
+        };
+        extraEntries = ''
+          /Windows
+            protocol: efi
+            path: boot():/EFI/Microsoft/Boot/bootmgfw.efi
+        '';
+      };
     };
-    loader.efi.canTouchEfiVariables = true;
-    loader.grub.enable = lib.mkForce false;
-    loader.systemd-boot.enable = lib.mkForce false;
   };
 
   environment.systemPackages = [ pkgs.sbctl ];