reNixos/s0meMiniPC-nix/boot/lanzaboote.nix

{...}: {
    boot = {
        lanzaboote = {
            enable = true;
            configurationLimit = 7;
            pkiBundle = "/var/lib/sbctl";
            settings = {
                timeout = 2;
                sortKey = "lanza";
            };
        };
    };
}