nix-fleet/modules/security/secure-boot/secure-boot.nix

{ ... }: {
  flake.nixosModules.secure-boot = { pkgs, ... }: {
    environment.systemPackages = with pkgs; [
      sbctl
    ];
  };
}