revamp of structure

modules/boot/default.nix

@@ -0,0 +1,4 @@
+{ pkgs, ... }:
+{
+  boot.kernelPackages = pkgs.linuxPackages_latest;
+}

modules/boot/plymouth.nix

@@ -0,0 +1,25 @@
+{pkgs,...}: 
+{
+  boot.consoleLogLevel = 3;
+  boot.initrd.verbose = false;
+  boot.kernelParams = [
+    "quiet"
+    "udev.log_priority=3"
+    "rd.udev.log_level=3"
+    "rd.systemd.show_status=auto"
+  ];
+
+  boot.plymouth = {
+    enable = true;
+    theme = "bgrt";
+    package = pkgs.plymouth.overrideAttrs (old: {
+      postInstall = (old.postInstall or "") + ''
+        sed -i \
+          -e 's/DialogClearsFirmwareBackground=true/DialogClearsFirmwareBackground=false/' \
+          -e 's/DialogVerticalAlignment=.382/DialogVerticalAlignment=.55/' \
+          -e 's/TitleVerticalAlignment=.382/TitleVerticalAlignment=.55/' \
+          $out/share/plymouth/themes/bgrt/bgrt.plymouth
+      '';
+    });
+  };
+}

modules/boot/secure-boot.nix

@@ -0,0 +1,20 @@
+{ lib, pkgs, inputs, ... }:
+{
+  inputs = [
+    inputs.lanzaboote.nixosModules.lanzaboote
+  ];
+
+  environment.systemPackages = [ pkgs.sbctl ];
+  boot.loader.systemd-boot.enable = lib.mkForce false;
+
+  boot.lanzaboote = {
+    enable = true;
+    pkiBundle = "/var/lib/sbctl";
+    autoGenerateKeys.enable = true;
+    autoEnrollKeys = {
+      enable = true;
+      autoReboot = true;
+    };
+    configurationLimit = 5;
+  };
+}

modules/boot/systemd-boot.nix

@@ -0,0 +1,6 @@
+{ }:
+{
+  boot.loader.systemd-boot.enable = true;
+  boot.loader.timeout = 0;
+  boot.loader.efi.canTouchEfiVariables = true;
+}