diff --git a/flake.nix b/flake.nix
index dc37e841..139a9c57 100644
--- a/flake.nix
+++ b/flake.nix
@@ -166,7 +166,12 @@
             programs.${shell}.enable = true;
             system = {
               inherit stateVersion;
-              autoUpgrade.flake = flakeURL;
+              autoUpgrade = {
+                enable = true;
+                dates = "02:00";
+                allowReboot = false;
+                flake = flakeURL;
+              };
             };
             users.users.${user} = {
               inherit group;
diff --git a/hosts/Legion/configuration.nix b/hosts/Legion/configuration.nix
index 3572264a..1240a582 100644
--- a/hosts/Legion/configuration.nix
+++ b/hosts/Legion/configuration.nix
@@ -1,7 +1,7 @@
 # Edit this configuration file to define what should be installed on
 # your system.  Help is available in the configuration.nix(5) man page
 # and in the NixOS manual (accessible by running `nixos-help`).
-{ ... }:
+{ lib, ... }:
 let
   # generate via openvpn --genkey --secret openvpn-laptop.key
   client-key = "/root/openvpn.key";
@@ -14,9 +14,7 @@ in {
   boot.loader.efi.canTouchEfiVariables = true;
   users.mutableUsers = false;
   system.autoUpgrade = {
-    enable = true;
-    dates = "02:00";
-    allowReboot = true;
+    allowReboot = lib.mkForce true;
     rebootWindow = {
       lower = "03:00";
       upper = "05:00";