diff --git a/hosts/franz/disko.nix b/hosts/franz/disko.nix
index 313c8c3..29ec4ca 100644
--- a/hosts/franz/disko.nix
+++ b/hosts/franz/disko.nix
@@ -19,6 +19,7 @@
               type = "filesystem";
               format = "vfat";
               mountpoint = "/boot";
+              mountOptions = ["umask=0077"];
             };
           };
           swap = {