From b0dbfa4856e288d119174ebfd7859c028b99ea61 Mon Sep 17 00:00:00 2001
From: Lillian Violet <git@lillianviolet.dev>
Date: Sat, 3 Feb 2024 17:19:23 +0100
Subject: [PATCH] Make /boot inacessible by default

---
 nixos/hosts/EDI/hardware-configuration.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/nixos/hosts/EDI/hardware-configuration.nix b/nixos/hosts/EDI/hardware-configuration.nix
index 9305d68..008e857 100644
--- a/nixos/hosts/EDI/hardware-configuration.nix
+++ b/nixos/hosts/EDI/hardware-configuration.nix
@@ -23,6 +23,7 @@
   fileSystems."/boot" =
     { device = "/dev/disk/by-uuid/01B2-909E";
       fsType = "vfat";
+      options = [ "fmask=0077" "dmask=0077" "defaults" ];
     };
 
   swapDevices =