diff --git a/hosts/srv-public/default.nix b/hosts/srv-public/default.nix
index b8c9654..7b6de63 100644
--- a/hosts/srv-public/default.nix
+++ b/hosts/srv-public/default.nix
@@ -36,11 +36,6 @@
 
         crowdsec = {
           enable = true;
-          sources = {
-            iptables = true;
-            sshd = true;
-            caddy = true;
-          };
           bouncers.firewall = true;
         };
 
diff --git a/modules/system/services/crowdsec/default.nix b/modules/system/services/crowdsec/default.nix
index fc5dc83..94ad3ea 100644
--- a/modules/system/services/crowdsec/default.nix
+++ b/modules/system/services/crowdsec/default.nix
@@ -24,9 +24,15 @@ in
       default = 6060;
     };
     sources = {
-      iptables = lib.mkEnableOption "";
-      caddy = lib.mkEnableOption "";
-      sshd = lib.mkEnableOption "";
+      iptables = lib.mkEnableOption "" // {
+        default = true;
+      };
+      caddy = lib.mkEnableOption "" // {
+        default = config.services.caddy.enable;
+      };
+      sshd = lib.mkEnableOption "" // {
+        default = config.services.openssh.enable;
+      };
     };
   };