diff --git a/hosts/server/configuration.nix b/hosts/server/configuration.nix
index 0bef175..b5ffe54 100644
--- a/hosts/server/configuration.nix
+++ b/hosts/server/configuration.nix
@@ -101,25 +101,25 @@ services.nfs.server = {
 #  };
 
   # Allow WireGuard UDP port in firewall
-  networking.firewall.allowedUDPPorts = [ 51820 ];
+#  networking.firewall.allowedUDPPorts = [ 51820 ];
 
   # Enable IPv4 forwarding
-  boot.kernel.sysctl = {
-    "net.ipv4.ip_forward" = 1;
-  };
+#  boot.kernel.sysctl = {
+#    "net.ipv4.ip_forward" = 1;
+#  };
 
   # NAT: lets LAN devices reply to the Pi without needing routes on the LAN router
-  networking.nat = {
-    enable = true;
-    externalInterface = "enp0s18";
-    internalInterfaces = [ "wg0" ];
-  };
+#  networking.nat = {
+#    enable = true;
+#    externalInterface = "enp0s18";
+#    internalInterfaces = [ "wg0" ];
+#  };
 services.prometheus.exporters.node = {
   enable = true;
   openFirewall = true;
 };
 
-  services.openssh.settings.PermitRootLogin = "yes";
+#  services.openssh.settings.PermitRootLogin = "yes";
   # Open ports in the firewall.
   networking.firewall.allowedTCPPorts = [ 2049 111 ];
 #  networking.firewall.allowedUDPPorts = [ 111 2049 20048 ];