diff --git a/playbooks/backup.yml b/playbooks/backup.yml
index cf58b10..c677db0 100644
--- a/playbooks/backup.yml
+++ b/playbooks/backup.yml
@@ -15,7 +15,7 @@
         name: /export
         src: /dev/sd1a
         fstype: ffs
-        opts: rw,softdep,noatime
+        opts: rw,softdep,noatime,noexec,nosuid,nodev
         passno: "1"
         dump: "2"
         state: mounted
diff --git a/playbooks/log.yml b/playbooks/log.yml
index 2c7fcf4..c63276a 100644
--- a/playbooks/log.yml
+++ b/playbooks/log.yml
@@ -15,7 +15,7 @@
         name: /export
         src: /dev/sd1a
         fstype: ffs
-        opts: rw,softdep,noatime
+        opts: rw,softdep,noatime,noexec,nosuid,nodev
         passno: "1"
         dump: "2"
         state: mounted
diff --git a/playbooks/minecraft.yml b/playbooks/minecraft.yml
index 9a88509..48b237c 100644
--- a/playbooks/minecraft.yml
+++ b/playbooks/minecraft.yml
@@ -15,7 +15,7 @@
         name: /export
         src: LABEL=/export
         fstype: xfs
-        opts: noatime
+        opts: noatime,noexec,nosuid,nodev
         passno: "0"
         dump: "0"
         state: mounted
diff --git a/playbooks/nas.yml b/playbooks/nas.yml
index cb65fe3..22c11f2 100644
--- a/playbooks/nas.yml
+++ b/playbooks/nas.yml
@@ -18,7 +18,7 @@
         name: /export/home
         src: LABEL=home
         fstype: xfs
-        opts: noatime
+        opts: noatime,nodev
         passno: "0"
         dump: "0"
         state: mounted
@@ -27,7 +27,7 @@
         name: /export/roles
         src: LABEL=roles
         fstype: xfs
-        opts: noatime
+        opts: noatime,nodev
         passno: "0"
         dump: "0"
         state: mounted