diff --git a/hosts/apollo/boot.nix b/hosts/apollo/boot.nix
index b87ebca..a6d9d33 100644
--- a/hosts/apollo/boot.nix
+++ b/hosts/apollo/boot.nix
@@ -25,6 +25,14 @@
       crypttabExtraOpts = [ "fido2-device=auto" ];
     };
 
+    systemd.services."systemd-cryptsetup@" = {
+      overrideStrategy = "asDropin";
+      serviceConfig = {
+        Restart = "no";
+        OnFailureJobMode = "fail";
+      };
+    };
+
     systemd.services."zfs-import-nix-root" = {
       wants = [ "keys.mount" ];
       after = [ "keys.mount" ];