Merge pull request 'fix: do not allow edits to the bootloader' (#92) from feature/bootloader_security into main

Reviewed-on: #92

modules/nixos/bootloader.nix

@@ -4,6 +4,8 @@
   # set bootloader to systemd
   boot.loader = {
     systemd-boot.enable = true;
+    # no kernel command line editing at the boot menu (e.g. init=/bin/sh)
+    systemd-boot.editor = false;
     efi.canTouchEfiVariables = true;
   };