diff --git a/kube/deploy/core/_networking/cilium/app/config/biohazard/helm-values.yaml b/kube/deploy/core/_networking/cilium/app/config/biohazard/helm-values.yaml
index a37254cf..3e7902b8 100644
--- a/kube/deploy/core/_networking/cilium/app/config/biohazard/helm-values.yaml
+++ b/kube/deploy/core/_networking/cilium/app/config/biohazard/helm-values.yaml
@@ -32,10 +32,10 @@ ipam:
   mode: kubernetes
 kubeProxyReplacement: true
 ### Talos 1.5 and above come with KubePrism which is an internal TCP load balancer for kube-apiserver. DO NOT COPY IF NOT ON TALOS OR A KUBEPRISM-SUPPORTED KUBERNETES DISTRIBUTION!!!
-# k8sServiceHost: "127.0.0.1"
-# k8sServicePort: "7445"
-k8s:
-  apiServerURLs: "https://${IP_ROUTER_VLAN_K8S_PREFIX}1:6443 https://${IP_ROUTER_VLAN_K8S_PREFIX}2:6443 https://${IP_ROUTER_VLAN_K8S_PREFIX}3:6443"
+k8sServiceHost: "127.0.0.1"
+k8sServicePort: "7445"
+# k8s:
+#   apiServerURLs: "https://${IP_ROUTER_VLAN_K8S_PREFIX}1:6443 https://${IP_ROUTER_VLAN_K8S_PREFIX}2:6443 https://${IP_ROUTER_VLAN_K8S_PREFIX}3:6443"
 kubeProxyReplacementHealthzBindAddr: "0.0.0.0:10256"
 enableIPv4Masquerade: false # BGP advertise PodCIDR so only FortiGate does NAT
 directRoutingSkipUnreachable: true # use local L2 within cluster while outside cluster uses BGP