diff --git a/nix/lib/config/options.nix b/nix/lib/config/options.nix
index 1d19c23..a75107c 100644
--- a/nix/lib/config/options.nix
+++ b/nix/lib/config/options.nix
@@ -348,7 +348,8 @@ let
         # isRouter = Part of the core network?
         default =
           config.site.hosts.${name}.interfaces ? core &&
-          config.site.net.core.hosts4 ? ${name};
+          config.site.net.core.hosts4 ? ${name} &&
+          config.site.hosts.${name}.role == "container";
         description = "Should this host route?";
       };
       firewall.enable = mkOption {