diff --git a/modules/system/network/default.nix b/modules/system/network/default.nix
index 8a5dbe9..05c041d 100644
--- a/modules/system/network/default.nix
+++ b/modules/system/network/default.nix
@@ -17,6 +17,7 @@
         "1.1.1.1"
         "8.8.8.8"
       ];
+      firewall.enable = false;
     };
     services.unbound = {
       enable = true;
diff --git a/modules/system/network/wake-on-lan.nix b/modules/system/network/wake-on-lan.nix
index 6f27b39..81da4fd 100644
--- a/modules/system/network/wake-on-lan.nix
+++ b/modules/system/network/wake-on-lan.nix
@@ -16,7 +16,6 @@
     networking = {
       # Just for hackstation, replace enp5s0 with primary interface
       interfaces.enp5s0.wakeOnLan.enable = true;
-      firewall.enable = false;
     };
   };
 }