diff --git a/nixos/configuration.nix b/nixos/configuration.nix
index e0245af..0708dfa 100644
--- a/nixos/configuration.nix
+++ b/nixos/configuration.nix
@@ -15,12 +15,12 @@ in {
   boot = {
     loader = {
       # Set this to true on first install. This must be false for secure boot.
-      systemd-boot.enable = true;
+      systemd-boot.enable = lib.mkForce false;
       efi.canTouchEfiVariables = true;
     };
 
     lanzaboote = {
-      enable = false;
+      enable = true;
       pkiBundle = "/var/lib/sbctl";
     };
   };