diff --git a/home-manager/shared/shell/zsh.nix b/home-manager/shared/shell/zsh.nix
index d68ee10..cc38d8f 100644
--- a/home-manager/shared/shell/zsh.nix
+++ b/home-manager/shared/shell/zsh.nix
@@ -34,6 +34,15 @@
           sha256 = "sha256-Z6EYQdasvpl1P78poj9efnnLj7QQg13Me8x1Ryyw+dM=";
         };
       }
+      {
+        name = "terraform";
+        src = pkgs.fetchFromGitHub {
+          owner = "macunha1";
+          repo = "zsh-terraform";
+          rev = "fd1471d3757f8ed13f56c4426f88616111de2a87";
+          sha256 = "0z6i9wjjklb4lvr7zjhbphibsyx51psv50gm07mbb0kj9058j6kc";
+        };
+      }
     ];
     autosuggestion.enable = true;
     enableCompletion = true;
diff --git a/nixos/hosts/EDI/configuration.nix b/nixos/hosts/EDI/configuration.nix
index d0d1767..78ee9f7 100644
--- a/nixos/hosts/EDI/configuration.nix
+++ b/nixos/hosts/EDI/configuration.nix
@@ -49,13 +49,13 @@
   # This setting is usually set to true in configuration.nix
   # generated at installation time. So we force it to false
   # for now.
-  boot.loader.systemd-boot.enable = true;
+  boot.loader.systemd-boot.enable = lib.mkForce false;
   boot.initrd.systemd.enable = true;
 
-  # boot.lanzaboote = {
-  #   enable = true;
-  #   pkiBundle = "/etc/secureboot";
-  # };
+  boot.lanzaboote = {
+    enable = true;
+    pkiBundle = "/etc/secureboot";
+  };
 
   # https://nixos.wiki/wiki/FAQ/When_do_I_update_stateVersion
   system.stateVersion = "24.11";