From 2a986e89a8ac322c97b2d1fa2983bcef022409db Mon Sep 17 00:00:00 2001
From: Patrick Stevens <3138005+Smaug123@users.noreply.github.com>
Date: Sun, 19 Oct 2025 23:32:37 +0100
Subject: [PATCH] Stop boot partition being world readable (#128)

---
 hardware/capybara.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/hardware/capybara.nix b/hardware/capybara.nix
index bb31fce..9124559 100644
--- a/hardware/capybara.nix
+++ b/hardware/capybara.nix
@@ -24,7 +24,7 @@
   fileSystems."/boot" = {
     device = "/dev/disk/by-uuid/5BCD-7078";
     fsType = "vfat";
-    options = ["fmask=0022" "dmask=0022"];
+    options = ["fmask=0077" "dmask=0077"];
   };
 
   swapDevices = [];