diff --git a/hosts/common/system/configs/impermanence/default.nix b/hosts/common/system/configs/impermanence/default.nix
index 4f57a18..aab33c3 100644
--- a/hosts/common/system/configs/impermanence/default.nix
+++ b/hosts/common/system/configs/impermanence/default.nix
@@ -17,7 +17,7 @@
       wantedBy = [ "initrd.target" ];
       before = [ "sysroot.mount" ];
       after = [ "cryptsetup.target" ];
-      unitConfig.DefaultDependencies = "no";
+      unitConfig.DefaultDependencies = false;
       serviceConfig.Type = "oneshot";
       script = builtins.readFile ./scripts/wipe.sh;
     };
diff --git a/hosts/common/system/configs/impermanence/options.nix b/hosts/common/system/configs/impermanence/options.nix
index e6bb7d5..49e8784 100644
--- a/hosts/common/system/configs/impermanence/options.nix
+++ b/hosts/common/system/configs/impermanence/options.nix
@@ -180,8 +180,8 @@ in
           after = [ c.service ];
           unitConfig = {
             ConditionPathExists = [ (lib.strings.escape [ " " ] c._source) ];
-            RefuseManualStart = "yes";
-            RefuseManualStop = "yes";
+            RefuseManualStart = true;
+            RefuseManualStop = true;
           };
           what = c._source;
           where = c._target;
@@ -208,10 +208,10 @@ in
                 "umount.target"
               ];
               conflicts = [ "umount.target" ];
-              unitConfig.DefaultDependencies = "no";
+              unitConfig.DefaultDependencies = false;
               serviceConfig = {
                 Type = "oneshot";
-                RemainAfterExit = "yes";
+                RemainAfterExit = true;
               };
               script = ''
                 source=${lib.strings.escapeShellArg c._sourceRoot}