diff --git a/hosts/quitte/network.nix b/hosts/quitte/network.nix
index 0148ec2..a194b4e 100644
--- a/hosts/quitte/network.nix
+++ b/hosts/quitte/network.nix
@@ -20,7 +20,10 @@ in
     useNetworkd = true;
     nftables.enable = true;
 
-    firewall.allowedUDPPorts = [ wireguard_port ];
+    firewall = {
+      allowedUDPPorts = [ wireguard_port ];
+      logRefusedConnections = false;
+    };
     wireguard.enable = true;
   };