refactor(modules/impermanence): Move all optional dirs to their modules

This increases the locality of configurations and makes it easier to
see, what happens, when you enable a module.

1 files changed, 6 insertions, 0 deletions

diff --git a/modules/by-name/bo/boot/module.nix b/modules/by-name/bo/boot/module.nix
index 711e9d23..8b71ce65 100644
--- a/modules/by-name/bo/boot/module.nix
+++ b/modules/by-name/bo/boot/module.nix
@@ -67,6 +67,12 @@ in {
       #   copyExtraFilesForBoot = copyExtraFiles;
       # };
 
+      # This should only be necessary for `lanzaboote`, but that is the current default in
+      # this module.
+      soispha.impermanence.directories = [
+        "/etc/secureboot"
+      ];
+
       boot = {
         initrd = {
           kernelModules = ["nvme" "btrfs"];