diff --git a/hosts/JWST/configuration.nix b/hosts/JWST/configuration.nix
index 0871f95..1977569 100644
--- a/hosts/JWST/configuration.nix
+++ b/hosts/JWST/configuration.nix
@@ -13,7 +13,7 @@
   ];
 
   boot.loader = {
-    efi.canTouchEfiVariables = true;
+    efi.canTouchEfiVariables = false;
     # efi.efiSysMountPoint = "/boot/efi";
     grub = {
       efiSupport = true;