diff --git a/systems/gateway/default.nix b/systems/gateway/default.nix
index 0fb7a1d..19c0b24 100644
--- a/systems/gateway/default.nix
+++ b/systems/gateway/default.nix
@@ -2,6 +2,7 @@
   imports = [ ./hardware.nix ];
   
   boot.loader.systemd-boot.enable = lib.mkForce true;
+  boot.loader.efi.canTouchEfiVariables = lib.mkForce false;
   boot.loader.grub = {
     enable = true;
     # device = "nodev";              # Required for EFI#