diff --git a/config/hardware/socrates.nix b/config/hardware/socrates.nix
index 63a4f60..1542c73 100644
--- a/config/hardware/socrates.nix
+++ b/config/hardware/socrates.nix
@@ -76,7 +76,7 @@
       "/state" = {
         device = "/dev/disk/by-label/socrates-data";
         fsType = "btrfs";
-        options = [ "subvol=@state" "compress=zstd" "noatime" "nodiratime" ];
+        options = [ "subvol=@state" "compress=zstd" "noatime" "nodiratime" "noexec" ];
       };
 
       "/home" = {