diff --git a/common/base-server.nix b/common/base-server.nix
index acf31db..57d6eab 100644
--- a/common/base-server.nix
+++ b/common/base-server.nix
@@ -4,6 +4,7 @@
   nix.package = lib.mkDefault pkgs.lix;
   services.openssh.enable = lib.mkForce true;
 
+  networking.nftables.enable = true;
   networking.firewall.enable = true;
   networking.firewall.logRefusedConnections = false;
   networking.firewall.logReversePathDrops = true;