diff --git a/clanModules/single-disk/roles/default.nix b/clanModules/single-disk/roles/default.nix
index 64edc68d6..0a6faf2bb 100644
--- a/clanModules/single-disk/roles/default.nix
+++ b/clanModules/single-disk/roles/default.nix
@@ -36,6 +36,7 @@
                   type = "filesystem";
                   format = "vfat";
                   mountpoint = "/boot";
+                  mountOptions = [ "umask=0077" ];
                 };
               };
               root = {