diff --git a/system/thinknix/hardware-configuration.nix b/system/thinknix/hardware-configuration.nix
index dc305879..03a7ae64 100644
--- a/system/thinknix/hardware-configuration.nix
+++ b/system/thinknix/hardware-configuration.nix
@@ -12,7 +12,10 @@
   boot = {
     initrd.availableKernelModules = ["ata_piix" "uhci_hcd" "virtio_pci" "virtio_scsi" "sd_mod"];
     initrd.kernelModules = [];
-    kernelModules = ["kvm-intel"];
+    kernelModules = [
+      "kvm-intel"
+      "ip_tables" # Required by wireguard docker container
+    ];
     extraModulePackages = [];
   };