make boot non world accessable

2025-12-03 18:27:14 -05:00
parent db11b402d1
commit afa4e3b020
1 changed files with 1 additions and 0 deletions
--- a/hosts/default.nix
+++ b/hosts/default.nix
@@ -35,6 +35,7 @@ let
                  type = "filesystem";
                  format = "vfat";
                  mountpoint = "/boot";
+                  mountOptions = [ "umask=0077" ];
                  extraArgs = [ "-n" "BOOT" ];
                };
              };