https://image.nostr.build/287002a8c5b5be9b0a3c6e2527f8bdb47a59db6acee3fcf0f8ffbbe301a9d09f.gif


```
{
  description = "Killy the killing machine";

  inputs = {
    nixpkgs = {
      url = "github:NixOS/nixpkgs/nixos-unstable";
      follows = "nix-bitcoin/nixpkgs-unstable";
    };
    lanzaboote = {
      url = "github:nix-community/lanzaboote/v0.4.1";
      inputs = {
        nixpkgs = {
          follows = "nixpkgs";
        };
      };
    };
    nix-bitcoin = {
      url = "github:fort-nix/nix-bitcoin/release";
    };
  };
  outputs = { self, nixpkgs, lanzaboote, nix-bitcoin, ...}: {
    nixosConfigurations = {
      killy = nixpkgs.lib.nixosSystem {
        system = "x86_64-linux";
        modules = [
          ./configuration.nix
          nix-bitcoin.nixosModules.default
          lanzaboote.nixosModules.lanzaboote
          ({ pkgs, lib, ... }: {
            environment = {
              systemPackages = [
                pkgs.sbctl
              ];
            };
            boot = {
              loader = {
                systemd-boot = {
                  enable = lib.mkForce false;
                };
              };
              lanzaboote = {
                enable = true;
                pkiBundle = "/etc/secureboot";
              };
            };
            nix-bitcoin = {
              generateSecrets = true;
              nodeinfo = {
                enable = true;
              };
            };
            services = {
              bitcoind = {
                enable = true;
                txindex = true;
                zmqpubrawblock = "tcp://127.0.0.1:28332";
                zmqpubrawtx = "tcp://127.0.0.1:28333";
              };
              fulcrum = {
                enable = true;
              };
              lnd = {
                enable = true;
                certificate = {
                  extraIPs = [
                    “[REDACTED]”
                    “[REDACTED]”
                  ];
                };
              };
              lightning-loop = {
                enable = true;
                certificate = {
                  extraIPs = [
                    “[REDACTED]”
                    “[REDACTED]”
                  ];
                };
              };
              lightning-pool = {
                enable = true;
              };
            };
          })
        ];
      };
    };
  };
}

```