diff --git a/config/hooks/live/zzzz_ciss_crypt_squash.hook.binary b/config/hooks/live/zzzz_ciss_crypt_squash.hook.binary
index 1c7030d..d5a8917 100644
--- a/config/hooks/live/zzzz_ciss_crypt_squash.hook.binary
+++ b/config/hooks/live/zzzz_ciss_crypt_squash.hook.binary
@@ -99,7 +99,7 @@ if [[ "${VAR_GITEA_RUNNER}" == "false" ]]; then
     --verbose \
     "${LUKSFS}"
 
-else
+elif [[ "${VAR_GITEA_RUNNER}" == "true" ]]; then
 
   cryptsetup luksFormat \
     --batch-mode \
diff --git a/lib/lib_lb_config_write_trixie.sh b/lib/lib_lb_config_write_trixie.sh
index a8a676a..00a84ed 100644
--- a/lib/lib_lb_config_write_trixie.sh
+++ b/lib/lib_lb_config_write_trixie.sh
@@ -101,7 +101,7 @@ lb_config_write_trixie() {
     --system live \
     --source false \
     --source-images tar \
-    --uefi-secure-boot auto \
+    --uefi-secure-boot enable \
     --updates true \
     --utc-time true \
     --verbose