diff --git a/krebs/3modules/cachecache.nix b/krebs/3modules/cachecache.nix
index c02c7c80c..989320480 100644
--- a/krebs/3modules/cachecache.nix
+++ b/krebs/3modules/cachecache.nix
@@ -91,7 +91,7 @@ in
     };
   };
 
-  config = {
+  config = mkIf cfg.enable {
     networking.firewall.allowedTCPPorts = [ 80 443 ];