From 7452ae7b00a1766e48bb324f934394c18793e223 Mon Sep 17 00:00:00 2001
From: wo2wz <189177184+wo2wz@users.noreply.github.com>
Date: Sun, 21 Dec 2025 16:56:45 -0500
Subject: [PATCH] hosts: use 0077 masks for /boot

---
 hosts/Drone/hardware-configuration.nix      | 1 +
 hosts/Earthmover/hardware-configuration.nix | 2 +-
 hosts/Gutterman/hardware-configuration.nix  | 2 +-
 3 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/hosts/Drone/hardware-configuration.nix b/hosts/Drone/hardware-configuration.nix
index 86fbc11..f839d3b 100755
--- a/hosts/Drone/hardware-configuration.nix
+++ b/hosts/Drone/hardware-configuration.nix
@@ -28,6 +28,7 @@
   fileSystems."/boot" =
     { device = "/dev/disk/by-uuid/D867-8F68";
       fsType = "vfat";
+      options = [ "fmask=0077" "dmask=0077" ];
     };
 
   fileSystems."/home" =
diff --git a/hosts/Earthmover/hardware-configuration.nix b/hosts/Earthmover/hardware-configuration.nix
index 0633b9b..9bacf31 100755
--- a/hosts/Earthmover/hardware-configuration.nix
+++ b/hosts/Earthmover/hardware-configuration.nix
@@ -21,7 +21,7 @@
   fileSystems."/boot" =
     { device = "/dev/disk/by-id/nvme-WD_BLACK_SN7100_2TB_252830800317-part1";
       fsType = "vfat";
-      options = [ "fmask=0022" "dmask=0022" ];
+      options = [ "fmask=0077" "dmask=0077" ];
     };
 
   swapDevices = [ ];
diff --git a/hosts/Gutterman/hardware-configuration.nix b/hosts/Gutterman/hardware-configuration.nix
index fdd97c1..90f0442 100644
--- a/hosts/Gutterman/hardware-configuration.nix
+++ b/hosts/Gutterman/hardware-configuration.nix
@@ -53,7 +53,7 @@
   fileSystems."/boot" =
     { device = "/dev/disk/by-uuid/2877-1C39";
       fsType = "vfat";
-      options = [ "fmask=0022" "dmask=0022" ];
+      options = [ "fmask=0077" "dmask=0077" ];
     };
 
   swapDevices = [{