diff --git a/systems/gateway/hardware.nix b/systems/gateway/hardware.nix
index 1b914e6..a6fca84 100644
--- a/systems/gateway/hardware.nix
+++ b/systems/gateway/hardware.nix
@@ -5,10 +5,12 @@
   nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
 
   boot.loader.systemd-boot.enable = lib.mkForce false;
+  boot.loader.efi.canTouchEfiVariables = lib.mkForce false;
   boot.loader.grub = {
     enable = true;
     device = "/dev/sda";
     efiSupport = true;
+    efiInstallAsRemovable = true;
   };
 
   boot.initrd.availableKernelModules =