From dd832ca165abbeca4c659a71df6e3794ace4ad40 Mon Sep 17 00:00:00 2001
From: isabel <isabel@isabelroses.com>
Date: Thu, 11 Jun 2026 18:52:35 +0100
Subject: [PATCH] nixos/boot/secure-boot: cleanup

---
 modules/nixos/boot/secure-boot.nix | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/modules/nixos/boot/secure-boot.nix b/modules/nixos/boot/secure-boot.nix
index 87c28b6a..4bdfac9d 100644
--- a/modules/nixos/boot/secure-boot.nix
+++ b/modules/nixos/boot/secure-boot.nix
@@ -20,11 +20,10 @@ in
   config = mkIf sys.secureBoot {
     garden.packages = { inherit (pkgs) sbctl; };
 
-    # Lanzaboote replaces the systemd-boot module.
-    boot.loader.systemd-boot.enable = mkForce false;
-
     boot = {
-      bootspec.enable = true;
+      # Lanzaboote replaces the systemd-boot module.
+      loader.systemd-boot.enable = mkForce false;
+
       lanzaboote = {
         enable = true;
         pkiBundle = "/var/lib/sbctl";
-- 
2.51.2