diff --git a/modules/kub_net.nix b/modules/kub_net.nix
index 226caf0..93e4a79 100644
--- a/modules/kub_net.nix
+++ b/modules/kub_net.nix
@@ -1,39 +1,53 @@
 { lib, ... }:
 {
-  system.activationScripts.setZerotierName = lib.stringAfter [ "var" ] ''
-    echo "ebe7fbd44565ba9d=ztkubnet" > /var/lib/zerotier-one/devicemap 
-  '';
-
-  services.zerotierone = {
-    enable = true;
-    joinNetworks = [ "ebe7fbd44565ba9d" ];
+  options = {
+    services.rad-dev.k3s-net = {
+      enable = lib.mkOption {
+        default = true;
+        example = true;
+        description = "Whether to enable k3s-net.";
+        type = lib.types.bool;
+      };
+    };
   };
 
-  systemd.network = {
-    enable = true;
-    wait-online.anyInterface = true;
-    netdevs = {
-      "20-brkubnet" = {
-        netdevConfig = {
-          Kind = "bridge";
-          Name = "brkubnet";
+  config = lib.mkIf {
+
+    system.activationScripts.setZerotierName = lib.stringAfter [ "var" ] ''
+      echo "ebe7fbd44565ba9d=ztkubnet" > /var/lib/zerotier-one/devicemap 
+    '';
+
+    services.zerotierone = {
+      enable = true;
+      joinNetworks = [ "ebe7fbd44565ba9d" ];
+    };
+
+    systemd.network = {
+      enable = true;
+      wait-online.anyInterface = true;
+      netdevs = {
+        "20-brkubnet" = {
+          netdevConfig = {
+            Kind = "bridge";
+            Name = "brkubnet";
+          };
+        };
+      };
+      networks = {
+        "30-ztkubnet" = {
+          matchConfig.Name = "ztkubnet";
+          networkConfig.Bridge = "brkubnet";
+          linkConfig.RequiredForOnline = "enslaved";
+        };
+        "40-brkubnet" = {
+          matchConfig.Name = "brkubnet";
+          bridgeConfig = { };
+          linkConfig.RequiredForOnline = "no";
         };
       };
     };
-    networks = {
-      "30-ztkubnet" = {
-        matchConfig.Name = "ztkubnet";
-        networkConfig.Bridge = "brkubnet";
-        linkConfig.RequiredForOnline = "enslaved";
-      };
-      "40-brkubnet" = {
-        matchConfig.Name = "brkubnet";
-        bridgeConfig = { };
-        linkConfig.RequiredForOnline = "no";
-      };
-    };
-  };
 
-  # enable experimental networkd backend so networking doesnt break on hybrid systems
-  networking.useNetworkd = true;
+    # enable experimental networkd backend so networking doesnt break on hybrid systems
+    networking.useNetworkd = true;
+  };
 }