stuff

devices/p14s/default.nix

@@ -10,9 +10,16 @@
   # secure boot shit
   environment.systemPackages = [ pkgs.sbctl ];
   boot.loader.systemd-boot.enable = lib.mkForce false;
+  
   boot.lanzaboote = {
     enable = true;
     pkiBundle = "/var/lib/sbctl";
+    autoGenerateKeys.enable = true;
+    autoEnrollKeys = {
+      enable = true;
+      autoReboot = true;
+    };
+    configurationLimit = 5;
   }; 
 
   # swap & hibernate
@@ -28,9 +35,9 @@
       memorySize = 8192;
       cores = 6;
     };
-    
+
     environment.systemPackages = with pkgs; [
-      spice-vdagentd
+      spice-vdagent
     ];
   };