diff --git a/nix/home-server.nix b/nix/home-server.nix
index 023a1d2..a3a795e 100644
--- a/nix/home-server.nix
+++ b/nix/home-server.nix
@@ -149,10 +149,9 @@
       swtpm.enable = true;
       ovmf = {
         enable = true;
-        # packages = [(pkgs.OVMF.override {
-        #   secureBoot = true;
-        #   tpmSupport = true;
-        # }).fd];
+        packages = [
+          (pkgs.OVMF.override { secureBoot = true; tpmSupport = true; }).fd
+        ];
       };
     };
   };
@@ -164,18 +163,8 @@
     };
   };
 
-  # not working yet, in theory simplifies xml for vm
-  # environment.etc = {
-  #   "ovmf/edk2-x86_64-secure-code.fd" = {
-  #     source = config.virtualisation.libvirtd.qemu.package + "/share/qemu/edk2-x86_64-secure-code.fd";
-  #   };
-
-  #   "ovmf/edk2-i386-vars.fd" = {
-  #     source = config.virtualisation.libvirtd.qemu.package + "/share/qemu/edk2-i386-vars.fd";
-  #   };
-  # };
-  environment.etc."qemu/edk2-x86_64-secure-code.fd".source = "${pkgs.OVMF.fd}/FV/OVMF_CODE.secboot.fd";
-  environment.etc."qemu/edk2-i386-vars.fd".source = "${pkgs.OVMF.fd}/FV/OVMF_VARS.fd";
+  # environment.etc."qemu/edk2-x86_64-secure-code.fd".source = "${pkgs.OVMF.fd}/FV/OVMF_CODE.secboot.fd";
+  # environment.etc."qemu/edk2-i386-vars.fd".source = "${pkgs.OVMF.fd}/FV/OVMF_VARS.fd";
 
   powerManagement.powertop.enable = true;
   powerManagement.enable = true;