diff --git a/modules/servers/per-server/tyr/secrets.nix b/modules/servers/per-server/tyr/secrets.nix
index 340878d..53a28d1 100644
--- a/modules/servers/per-server/tyr/secrets.nix
+++ b/modules/servers/per-server/tyr/secrets.nix
@@ -47,18 +47,6 @@
       paperless-ngx = {
         file = "${inputs.secrets}/secrets/paperless-ngx.age";
       };
-      wg-wireproxy = {
-        file = "${inputs.secrets}/secrets/wg-wireproxy.age";
-        owner = "wireproxy";
-        group = "wireproxy";
-      };
-      wireproxy = {
-        file = "${inputs.secrets}/secrets/wireproxy.age";
-        path = "/etc/wireproxy/wireproxy.conf";
-        owner = "wireproxy";
-        group = "wireproxy";
-        symlink = false;
-      };
     };
   };
 }
diff --git a/modules/servers/per-server/tyr/services/incus.nix b/modules/servers/per-server/tyr/services/incus.nix
new file mode 100644
index 0000000..b77aa28
--- /dev/null
+++ b/modules/servers/per-server/tyr/services/incus.nix
@@ -0,0 +1,5 @@
+{
+  virtualisation.incus.enable = true;
+
+  networking.nftables.enable = true;
+}