diff --git a/hosts/istal/services/forgejo-runners/default.nix b/hosts/istal/services/forgejo-runners/default.nix
index 7643e5b..df76598 100644
--- a/hosts/istal/services/forgejo-runners/default.nix
+++ b/hosts/istal/services/forgejo-runners/default.nix
@@ -3,7 +3,6 @@
 {
   age.secrets.forgejo-runner-docker-token.file = ./forgejo-runner-docker-token.age;
 
-  local.system.kernel = "stable";
   virtualisation.docker.enable = true;
 
   services.gitea-actions-runner = {
diff --git a/hosts/tatos/configuration.nix b/hosts/tatos/configuration.nix
index 1234c44..fbf30bc 100644
--- a/hosts/tatos/configuration.nix
+++ b/hosts/tatos/configuration.nix
@@ -6,6 +6,8 @@
     ./services
   ];
 
+  local.system.kernel = "hardened";
+
   networking.hostName = "tatos";
 
   users.users.root.openssh.authorizedKeys.keys = globalData.publicKeys.users.jan;
diff --git a/modules/vps.nix b/modules/vps.nix
index 16177dc..5e0b323 100644
--- a/modules/vps.nix
+++ b/modules/vps.nix
@@ -7,7 +7,7 @@
   # Configs
   ################################################################################
   local.system = {
-    kernel = lib.mkDefault "hardened";
+    kernel = lib.mkDefault "stable";
     headless = lib.mkDefault true;
   };