diff --git a/etcnixos/system-mreow.nix b/etcnixos/system-mreow.nix
index d839fa7..87da6e4 100644
--- a/etcnixos/system-mreow.nix
+++ b/etcnixos/system-mreow.nix
@@ -56,7 +56,7 @@
 
   boot = {
     lanzaboote = {
-      enable = false;
+      enable = true;
       # TODO: proper secrets management so this is not stored in nix store
       pkiBundle = "/var/lib/sbctl";
     };
@@ -69,8 +69,7 @@
         generated at installation time. So we force it to false
         for now.
       */
-      # systemd-boot.enable = lib.mkForce false;
-      systemd-boot.enable = true;
+      systemd-boot.enable = lib.mkForce false;
     };
   };