diff --git a/hosts/common/networking.nix b/hosts/common/networking.nix
index d4ab1c5..99510eb 100644
--- a/hosts/common/networking.nix
+++ b/hosts/common/networking.nix
@@ -7,7 +7,7 @@
     dhcpcd.enable = false;
     firewall = {
       enable = true;
-      trustedInterfaces = ["tailscale0" "wt0"];
+      trustedInterfaces = ["tailscale0"];
       checkReversePath = "loose";
       allowedUDPPorts = [config.services.tailscale.port];
       allowedTCPPortRanges = [
diff --git a/hosts/server/default.nix b/hosts/server/default.nix
index fcfabf6..02bf979 100644
--- a/hosts/server/default.nix
+++ b/hosts/server/default.nix
@@ -80,7 +80,7 @@ in {
 
   services = {
     netbird = {
-      enable = true;
+      enable = false;
     };
     pcscd = {enable = true;};
     beszel-agent = {enable = true;};
diff --git a/hosts/workstation/default.nix b/hosts/workstation/default.nix
index 41dc6b0..424ff68 100644
--- a/hosts/workstation/default.nix
+++ b/hosts/workstation/default.nix
@@ -160,7 +160,7 @@ in {
 
   services = {
     netbird = {
-      enable = true;
+      enable = false;
     };
     power-profiles-daemon.enable = false;
     avahi = {