global(secureboot): fix pki store path

Author: soopyc

docs/src/internal/ext-files.md

@@ -6,7 +6,7 @@ sets of files/directories in this repository.
 <!-- These are coincidentally the same length. magic! -->
 
 - `-r-------- /etc/lego/desec`: acme credentials
-- `drwx------ /etc/secureboot`: secureboot keys
+- `drwx------ /var/lib/sbctl`: secure boot keys
 - `-r-------- /v/l/forgejo/data/jwt/oauth.pem`: forgejo oauth jwt private key
 - `-r-------- kita:/etc/radicale/users`: radicale user htpasswd mappings
 

global/gensokyo/presets/secureboot.nix

@@ -15,6 +15,6 @@ lib.mkIf cfg.secureboot {
   boot.loader.systemd-boot.enable = lib.mkForce false;
   boot.lanzaboote = {
     enable = true;
-    pkiBundle = "/etc/secureboot";
+    pkiBundle = "/var/lib/sbctl";
   };
 }