diff --git a/2configs/tinc/retiolum.nix b/2configs/tinc/retiolum.nix
index 0d27742..a2b24d3 100644
--- a/2configs/tinc/retiolum.nix
+++ b/2configs/tinc/retiolum.nix
@@ -1,10 +1,18 @@
-{ pkgs, config, ... }:
+{ pkgs, lib, config, ... }:
 {
   imports = [
     ../binary-cache/lass.nix
   ];
   krebs.tinc.retiolum.enable = true;
+  krebs.tinc.retiolum.extraConfig = ''
+      StrictSubnets = yes
+      ${lib.optionalString (config.krebs.build.host.nets.retiolum.via != null) ''
+        LocalDiscovery = no
+      ''}
+    '';
+  #krebs.tinc.retiolum.connectTo = [ "gum" ];
   environment.systemPackages = [ pkgs.tinc ];
   networking.firewall.allowedTCPPorts = [ config.krebs.build.host.nets.retiolum.tinc.port ];
   networking.firewall.allowedUDPPorts = [ config.krebs.build.host.nets.retiolum.tinc.port ];
+
 }