diff --git a/k8s/infra/vpn/netbird/agent/daemon-set.yaml b/k8s/infra/vpn/netbird/agent/daemon-set.yaml
index 43c08d5..99c6f35 100644
--- a/k8s/infra/vpn/netbird/agent/daemon-set.yaml
+++ b/k8s/infra/vpn/netbird/agent/daemon-set.yaml
@@ -15,11 +15,11 @@ spec:
       securityContext:
         seccompProfile:
           type: RuntimeDefault
-#        sysctls:
-#          # Considered unsafe, need to enable with kubelet argument.
-#          # see https://kubernetes.io/docs/tasks/administer-cluster/sysctl-cluster/#enabling-unsafe-sysctls
-#          - name: net.ipv4.conf.all.src_valid_mark
-#            value: "1"
+        sysctls:
+          # Considered unsafe, need to enable with kubelet argument.
+          # see https://kubernetes.io/docs/tasks/administer-cluster/sysctl-cluster/#enabling-unsafe-sysctls
+          - name: net.ipv4.conf.all.src_valid_mark
+            value: "1"
       containers:
         - name: agent
           image: docker.io/netbirdio/netbird:0.52.2 # renovate: docker=docker.io/netbirdio/netbird
diff --git a/k8s/infra/vpn/netbird/agent/kustomization.yaml b/k8s/infra/vpn/netbird/agent/kustomization.yaml
index 9668c6c..a03342f 100644
--- a/k8s/infra/vpn/netbird/agent/kustomization.yaml
+++ b/k8s/infra/vpn/netbird/agent/kustomization.yaml
@@ -6,10 +6,9 @@ configMapGenerator:
     namespace: netbird
     literals:
       - NB_HOSTNAME="talos-agent"
-      - NB_LOG_LEVEL="warn"
+      - NB_LOG_LEVEL="info"
       - NB_MANAGEMENT_URL="https://netbird.stonegarden.dev"
       - NB_ADMIN_URL="https://netbird.stonegarden.dev"
-      - NB_CONFIG="/var/lib/netbird/config.json"
 
 resources:
   - agent-setup-key.yaml