diff --git a/modules/system/boot/lanzaboote/module.nix b/modules/system/boot/lanzaboote/module.nix
index e7fd7a5..6df8f4a 100644
--- a/modules/system/boot/lanzaboote/module.nix
+++ b/modules/system/boot/lanzaboote/module.nix
@@ -6,12 +6,16 @@
   ...
 }: let
   inherit (lib.modules) mkIf;
+  inherit (lib.options) mkEnableOption;
+
+  cfg = config.modules.system.boot.lanzaboote;
 in {
+  options.modules.system.boot.lanzaboote.enable = mkEnableOption "Lanzaboote";
   imports = [
     inputs.lanzaboote.nixosModules.lanzaboote
   ];
 
-  config = mkIf false {
+  config = mkIf cfg.enable {
     boot = {
       lanzaboote = {
         enable = true;