diff --git a/modules/nixos/boot/secure-boot.nix b/modules/nixos/boot/secure-boot.nix
index dc7fded..94c2484 100644
--- a/modules/nixos/boot/secure-boot.nix
+++ b/modules/nixos/boot/secure-boot.nix
@@ -27,6 +27,7 @@
 
         boot.lanzaboote = {
           enable = true;
+          configurationLimit = 10;
           pkiBundle = "/var/lib/sbctl";
         };
       };