diff --git a/justfile b/justfile
index 54fd3a5..b5d6a80 100644
--- a/justfile
+++ b/justfile
@@ -6,7 +6,7 @@ check:
 
 switch *args:
     @sudo -v
-    nh os switch --ask . -- --keep-going {{args}}
+    nh os switch --no-nom --ask . -- --keep-going {{args}}
 
 rollback:
     @sudo -v
@@ -14,7 +14,7 @@ rollback:
 
 boot *args:
     @sudo -v
-    nh os boot --ask . -- --keep-going {{args}}
+    nh os boot --no-nom --ask . -- --keep-going {{args}}
 
 deploy system user="leo":
     #!/usr/bin/env bash
@@ -23,7 +23,7 @@ deploy system user="leo":
     nix copy "$flake" --to "ssh://{{user}}@{{system}}"
     # -R/--bypass-root-check is needed because of a Git CVE regression in Nix 2.20
     # See NixOS/nix#10202, viperML/nh#200
-    ssh -t "{{user}}@{{system}}" "sudo flock -w 60 /dev/shm/deploy-{{system}} nix run n#nh -- os switch -R -H {{system}} --ask $flake"
+    ssh -t "{{user}}@{{system}}" "sudo flock -w 60 /dev/shm/deploy-{{system}} nix run n#nh -- os switch --no-nom -R -H {{system}} --ask $flake"
 
 lint *args:
     statix check -i flake.nix **/hardware-configuration.nix {{args}}