new nixos dotfile layout

Signed-off-by: Michał Czyż <mike@c2yz.com>

hosts/modules/lanzaboot.nix

@@ -0,0 +1,14 @@
+{ lib, pkgs, inputs, ... }:
+{
+  imports = [ inputs.lanzaboote.nixosModules.lanzaboote ];
+
+  environment.systemPackages = [ pkgs.sbctl ];
+
+  boot = {
+    loader.systemd-boot.enable = lib.mkForce false;
+    lanzaboote = {
+      enable = true;
+      pkiBundle = "/etc/secureboot";
+    };
+  };
+}