diff --git a/SwarselSystems.org b/SwarselSystems.org
index a08ac17..6b3a967 100644
--- a/SwarselSystems.org
+++ b/SwarselSystems.org
@@ -6316,6 +6316,7 @@ This dynamically uses systemd boot or Lanzaboote depending on `config.swarselsys
       lanzaboote = lib.mkIf (!config.swarselsystems.initialSetup && config.swarselsystems.isSecureBoot) {
         enable = true;
         pkiBundle = "/var/lib/sbctl";
+        configurationLimit = 3;
       };
     };
   }
diff --git a/profiles/nixos/common/lanzaboote.nix b/profiles/nixos/common/lanzaboote.nix
index 461f059..1b2ebf4 100644
--- a/profiles/nixos/common/lanzaboote.nix
+++ b/profiles/nixos/common/lanzaboote.nix
@@ -8,6 +8,7 @@
     lanzaboote = lib.mkIf (!config.swarselsystems.initialSetup && config.swarselsystems.isSecureBoot) {
       enable = true;
       pkiBundle = "/var/lib/sbctl";
+      configurationLimit = 3;
     };
   };
 }