From 9231c5878f8d0a9043625dbd99937b9a46652563 Mon Sep 17 00:00:00 2001
From: tux <t@tux.rs>
Date: Sat, 9 May 2026 18:57:23 +0530
Subject: [PATCH] feat(boot): enable key auto-generation and enrollment

---
 modules/nixos/boot/secure-boot.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/modules/nixos/boot/secure-boot.nix b/modules/nixos/boot/secure-boot.nix
index 94c2484..1f319ab 100644
--- a/modules/nixos/boot/secure-boot.nix
+++ b/modules/nixos/boot/secure-boot.nix
@@ -27,6 +27,9 @@
 
         boot.lanzaboote = {
           enable = true;
+          autoGenerateKeys.enable = true;
+          autoEnrollKeys.enable = true;
+
           configurationLimit = 10;
           pkiBundle = "/var/lib/sbctl";
         };