diff --git a/modules/k3s/default.nix b/modules/k3s/default.nix
index 199e841..bf9f48d 100644
--- a/modules/k3s/default.nix
+++ b/modules/k3s/default.nix
@@ -69,7 +69,7 @@ in
       images = import ./images args;
       disable = [];
     };
-
+    systemd.services.k3s.serviceConfig.DeviceAllow = mkForce [ "/dev/fuse rwm" ];
     systemd.services.k3s = {
       restartTriggers = [
         (builtins.toJSON config.services.k3s.manifests)
@@ -81,9 +81,6 @@ in
       path = with pkgs; [
         openiscsi
       ];
-      serviceConfig = {
-        DeviceAllow = [ "/dev/fuse rwm" ];
-      };
     };
     
     system.activationScripts.cleanK3sManifests = {