diff --git a/flakes/nixos/disko.nix b/flakes/nixos/disko.nix
index 580078d..7c6a9c8 100644
--- a/flakes/nixos/disko.nix
+++ b/flakes/nixos/disko.nix
@@ -19,7 +19,7 @@
                 format = "vfat";
                 mountpoint = "/boot";
                 mountOptions = [
-                  "defaults"
+                  "defaults" "fmask=0077" "dmask=0077"
                 ];
               };
             };