diff --git a/modules/application-groups/k3s-primary.nix b/modules/application-groups/k3s-primary.nix
index dbef2ba..d7af473 100644
--- a/modules/application-groups/k3s-primary.nix
+++ b/modules/application-groups/k3s-primary.nix
@@ -3,7 +3,7 @@
   sops.secrets.k3s_token.sopsFile = ../../secrets/cluster.yaml;
 
   services.k3s = {
-    enable = true;
+    enable = false;
     role = "server";
     tokenFile = config.sops.secrets.k3s_token.path;
     clusterInit = true;
diff --git a/modules/application-groups/k3s-secondary.nix b/modules/application-groups/k3s-secondary.nix
index 138e846..09c47ab 100644
--- a/modules/application-groups/k3s-secondary.nix
+++ b/modules/application-groups/k3s-secondary.nix
@@ -3,7 +3,7 @@
   sops.secrets.k3s_token.sopsFile = ../../secrets/cluster.yaml;
 
   services.k3s = {
-    enable = true;
+    enable = false;
     role = "server"; # Or "agent" for worker only nodes
     tokenFile = config.sops.secrets.k3s_token.path;
     serverAddr = "https://cap-clust-01:6443";