diff --git a/hosts/containers/nix-build/default.nix b/hosts/containers/nix-build/default.nix
index 91271332..069b74e4 100644
--- a/hosts/containers/nix-build/default.nix
+++ b/hosts/containers/nix-build/default.nix
@@ -5,18 +5,21 @@
     ./tftp.nix
   ];
 
-  networking.hostName = "nix-build"; # Define your hostname.
-  networking.useDHCP = false;
-  networking.interfaces.enp6s18 = {
-    ipv4.addresses = [{
-      address = config.c3d2.hosts.nix-build.ip4;
-      prefixLength = zentralwerk.lib.config.site.net.serv.subnet4Len;
-    }];
+  networking = {
+    hostName = "nix-build"; # Define your hostname.
     useDHCP = false;
+    interfaces.enp6s18 = {
+      ipv4.addresses = [{
+        address = config.c3d2.hosts.nix-build.ip4;
+        prefixLength = zentralwerk.lib.config.site.net.serv.subnet4Len;
+      }];
+      useDHCP = false;
+    };
+    defaultGateway = "172.20.73.1";
+    # TODO: enable firewall
+    firewall.enable = false;
+    nameservers = [ "172.20.73.8" "9.9.9.9" ];
   };
-  networking.defaultGateway = "172.20.73.1";
-  networking.firewall.enable = false;
-  networking.nameservers = [ "172.20.73.8" "9.9.9.9" ];
 
   boot = {
     loader = {