diff --git a/systems/sandbox/cfg.nix b/systems/sandbox/cfg.nix
index ac76081..5c2281e 100644
--- a/systems/sandbox/cfg.nix
+++ b/systems/sandbox/cfg.nix
@@ -20,6 +20,7 @@
     };
     server = {
       openssh = true;
+      nftables = true;
       web = true;
       sops = true;