revamp of structure

modules/boot/secure-boot.nix

@@ -0,0 +1,20 @@
+{ lib, pkgs, inputs, ... }:
+{
+  inputs = [
+    inputs.lanzaboote.nixosModules.lanzaboote
+  ];
+
+  environment.systemPackages = [ pkgs.sbctl ];
+  boot.loader.systemd-boot.enable = lib.mkForce false;
+
+  boot.lanzaboote = {
+    enable = true;
+    pkiBundle = "/var/lib/sbctl";
+    autoGenerateKeys.enable = true;
+    autoEnrollKeys = {
+      enable = true;
+      autoReboot = true;
+    };
+    configurationLimit = 5;
+  };
+}