From ef7a580459557fbc289360316380145c821c55b0 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Tristan=20Dani=C3=ABl=20Maat?= <tm@tlater.net>
Date: Fri, 26 Jan 2024 00:35:47 +0100
Subject: [PATCH] filesystems: Fix /boot permissions

---
 nixos-config/default.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/nixos-config/default.nix b/nixos-config/default.nix
index 26538f5d..6cc3f712 100644
--- a/nixos-config/default.nix
+++ b/nixos-config/default.nix
@@ -198,6 +198,8 @@
 
   security.sudo-rs.enable = true;
 
+  fileSystems."/boot".options = ["umask=0077"];
+
   fonts = {
     enableDefaultPackages = true;