diff --git a/nixos/hosts/ioides/configuration.nix b/nixos/hosts/ioides/configuration.nix
index bff7a4c..50a1012 100644
--- a/nixos/hosts/ioides/configuration.nix
+++ b/nixos/hosts/ioides/configuration.nix
@@ -7,7 +7,7 @@
         ];
 
     boot.loader = {
-        efi.canTouchEfiVariables = true;
+        efi.canTouchEfiVariables = false;
         grub = {
             enable = true;
             efiSupport = true;