canTouchEfiVariables = false

nixos/boot/default.nix

@@ -15,12 +15,12 @@
   boot.loader = {
     timeout = 5;
     efi = {
-      canTouchEfiVariables = true;
+      canTouchEfiVariables = false;
       efiSysMountPoint = "/boot";
     };
-    
+
     limine = {
       enable = true;
     };
   };
-}
+}