From 58e773ba33ef633900b930346d41fe58a2c774bb Mon Sep 17 00:00:00 2001
From: Guanran Wang <guanran928@outlook.com>
Date: Wed, 18 Oct 2023 17:42:59 +0800
Subject: [PATCH] disko: secure `/boot`

---
 flakes/nixos/disko.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/flakes/nixos/disko.nix b/flakes/nixos/disko.nix
index 580078d..7c6a9c8 100644
--- a/flakes/nixos/disko.nix
+++ b/flakes/nixos/disko.nix
@@ -19,7 +19,7 @@
                 format = "vfat";
                 mountpoint = "/boot";
                 mountOptions = [
-                  "defaults"
+                  "defaults" "fmask=0077" "dmask=0077"
                 ];
               };
             };