diff --git a/nixarr/nixarr.nix b/nixarr/nixarr.nix
index a142222..b9f8d58 100644
--- a/nixarr/nixarr.nix
+++ b/nixarr/nixarr.nix
@@ -181,8 +181,8 @@ in {
     ];
 
     # TODO: wtf to do about openports
-    vpnnamespaces.wg = {
-      enable = cfg.vpn.enable ;
+    vpnnamespaces.wg = mkIf cfg.vpn.enable {
+      enable = true;
       accessibleFrom = [
         "192.168.1.0/24"
         "127.0.0.1"