make /boot only root readable

2025-11-12 08:35:51 +01:00 · 2025-11-12 08:35:51 +01:00 · 1a21338f59
commit 1a21338f59
parent 7e437cf293
1 changed files with 1 additions and 0 deletions
--- a/hosts/nuos/disk-config.nix
+++ b/hosts/nuos/disk-config.nix
@ -21,6 +21,7 @@
              type = "filesystem";
              format = "vfat";
              mountpoint = "/boot";
+              mountOptions = [ "umask=0077" ];
            };
          };
          root = {