diff --git a/global/overlay/etc/puppet/cosmos-rules.yaml b/global/overlay/etc/puppet/cosmos-rules.yaml
index 22687b0..0b52928 100644
--- a/global/overlay/etc/puppet/cosmos-rules.yaml
+++ b/global/overlay/etc/puppet/cosmos-rules.yaml
@@ -1,18 +1,16 @@
 # Note that the matching is done with re.match()
-#'^k8sc[1-9].matrix.test.sunet.se$':
-#  sunet::microk8s::node: 
-#    channel: 1.28/stable
-    #'^k8sw[1-2].matrix.test.sunet.se$':
-    #  sunet::microk8s::node: 
-    #    channel: 1.28/stable
-'^k8sw3.matrix.test.sunet.se$':
-  sunet::microk8s::node:
-    channel: 1.28/stable
+.+:
   sunet::server:
     disable_all_local_users: true
     disable_ipv6_privacy: true
     encrypted_swap: false
-    nftables_init: false
+    nftables_init: true
     fail2ban: true
     ssh_allow_from_anywhere: false
     unattended_upgrades: true
+'^k8sc[1-9].matrix.test.sunet.se$':
+  sunet::microk8s::node:
+    channel: 1.28/stable
+'^k8sw[1-2].matrix.test.sunet.se$':
+  sunet::microk8s::node:
+    channel: 1.28/stable