diff --git a/hosts/library/default.nix b/hosts/library/default.nix
index 5db69f3..4be7b4d 100644
--- a/hosts/library/default.nix
+++ b/hosts/library/default.nix
@@ -79,7 +79,8 @@ with lib.my;
     after = [ "network.target" ];
     wantedBy = [ "default.target" ];
 
-    serviceConfig.type = "oneshot";
+    confinement.fullUnit = true;
+    serviceConfig.Type = "oneshot";
     script = let podmancli = "${pkgs.podman}/bin/podman";
       in ''
         check=$(${podmancli} network ls | grep "library-br" || true)