diff --git a/hosts/hypnos/disko-config.nix b/hosts/hypnos/disko-config.nix
index a84e899..2ae5443 100644
--- a/hosts/hypnos/disko-config.nix
+++ b/hosts/hypnos/disko-config.nix
@@ -15,6 +15,7 @@
                 type = "filesystem";
                 format = "vfat";
                 mountpoint = "/boot";
+                mountOptions = [ "umask=0077" ];
               };
             };
             swap = {