diff --git a/profiles/boot/grub.nix b/profiles/boot/grub.nix
index b670668..84d7a5f 100644
--- a/profiles/boot/grub.nix
+++ b/profiles/boot/grub.nix
@@ -5,10 +5,10 @@
       device = "nodev";
       efiSupport = true;
       useOSProber = true;
-      efiInstallAsRemovable = true;
+      efiInstallAsRemovable = lib.mkDefault true;
     };
     efi = {
-      canTouchEfiVariables = true;
+      canTouchEfiVariables = lib.mkDefault false;
       efiSysMountPoint = "/boot/efi";
     };
   };