From 9f6495e59860fa96686176e1f862335a430587fe Mon Sep 17 00:00:00 2001
From: Jordan Holt <jordan@vimium.com>
Date: Mon, 19 Jan 2026 23:03:22 +0000
Subject: [PATCH] hosts/hypnos: add umask for /boot

---
 hosts/hypnos/disko-config.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/hosts/hypnos/disko-config.nix b/hosts/hypnos/disko-config.nix
index a84e899..2ae5443 100644
--- a/hosts/hypnos/disko-config.nix
+++ b/hosts/hypnos/disko-config.nix
@@ -15,6 +15,7 @@
                 type = "filesystem";
                 format = "vfat";
                 mountpoint = "/boot";
+                mountOptions = [ "umask=0077" ];
               };
             };
             swap = {