From bcb774b84ac1b5fd5b2c7b790430376ebc117958 Mon Sep 17 00:00:00 2001
From: Felix Stupp <felix.stupp@banananet.work>
Date: Wed, 14 Aug 2024 15:53:08 +0200
Subject: [PATCH] nixos-mods/hwCommon: add common bootloader setup

---
 nix/nixos-modules/hwCommon.nix | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/nix/nixos-modules/hwCommon.nix b/nix/nixos-modules/hwCommon.nix
index 69bf723..7895957 100644
--- a/nix/nixos-modules/hwCommon.nix
+++ b/nix/nixos-modules/hwCommon.nix
@@ -56,6 +56,21 @@ in
   config = lib.mkIf cfg.enable {
 
 
+    boot = {
+
+      # TODO adapt better
+      loader = {
+        efi.canTouchEfiVariables = lib.mkDefault true;
+        systemd-boot = {
+          enable = true;
+          editor = lib.mkDefault true; # TODO lockdown (disable this OR enable TPM PCR checks)
+          memtest86.enable = lib.mkDefault true;
+        };
+      };
+
+    };
+
+
     hardware = {
 
       cpu = lib.mkMerge [