From 4c7142dcdae28a58d4ffe8b8795cd6f25403c3d3 Mon Sep 17 00:00:00 2001
From: Yuri Tatishchev <itatishch@gmail.com>
Date: Sun, 7 Dec 2025 20:47:34 -0800
Subject: [PATCH] make lanzaboote optional

---
 hosts/Yura-TPX13/default.nix | 5 +++++
 hosts/common-desktop.nix     | 6 +-----
 2 files changed, 6 insertions(+), 5 deletions(-)

diff --git a/hosts/Yura-TPX13/default.nix b/hosts/Yura-TPX13/default.nix
index 7c30e87..816e0d2 100644
--- a/hosts/Yura-TPX13/default.nix
+++ b/hosts/Yura-TPX13/default.nix
@@ -11,6 +11,11 @@
     "sysrq_always_enabled=1"
   ];
 
+  boot.lanzaboote = {
+    enable = true;
+    pkiBundle = "/var/lib/sbctl";
+  };
+
   networking.hostName = "Yura-TPX13"; # Define your hostname.
   networking.hostId = "8425e349"; # Required for ZFS.
 
diff --git a/hosts/common-desktop.nix b/hosts/common-desktop.nix
index 3f06707..2b8ae31 100644
--- a/hosts/common-desktop.nix
+++ b/hosts/common-desktop.nix
@@ -11,11 +11,7 @@
   boot.loader = {
     efi.canTouchEfiVariables = true;
     timeout = 3;
-    systemd-boot.enable = false;
-  };
-  boot.lanzaboote = {
-    enable = true;
-    pkiBundle = "/var/lib/sbctl";
+    systemd-boot.enable = !config.boot.lanzaboote.enable;
   };
 
   # https://nixos.wiki/wiki/Accelerated_Video_Playback