diff --git a/nix/nixos-module/container/anon.nix b/nix/nixos-module/container/anon.nix
index d72f660..59396a3 100644
--- a/nix/nixos-module/container/anon.nix
+++ b/nix/nixos-module/container/anon.nix
@@ -89,7 +89,7 @@ in
     '';
   }) tunnels;
 
-  networking.nat = lib.optionalAttrs (firstTunnel != null) {
+  networking.nat = lib.optionalAttrs enabled {
     enable = true;
     enableIPv6 = true;
     internalInterfaces = [ "core" ];