diff --git a/data.nix b/data.nix
index 3b975ce..38a1966 100644
--- a/data.nix
+++ b/data.nix
@@ -24,7 +24,6 @@ rec {
     immich-server = 3002;
     immich-machine-learning = 3003; # as of writing, hardcoded in the immich module
 
-    nsd-unwrapped = 5353;
     soju = 6697;
     soju-ws = 6698;
     matrix-synapse = 8008;
diff --git a/hosts/fra1-b/configuration.nix b/hosts/fra1-b/configuration.nix
index 708d7dd..213cd7b 100644
--- a/hosts/fra1-b/configuration.nix
+++ b/hosts/fra1-b/configuration.nix
@@ -14,7 +14,6 @@ in
     motiejus-passwd-hash.file = ../../secrets/motiejus_passwd_hash.age;
     root-passwd-hash.file = ../../secrets/root_passwd_hash.age;
     sasl-passwd.file = ../../secrets/postfix_sasl_passwd.age;
-    iodine-passwd.file = ../../secrets/iodine.age;
     ssh8022-server = {
       file = ../../secrets/ssh8022.age;
       owner = "spiped";
@@ -116,18 +115,8 @@ in
   };
 
   services = {
-    iodine.server = {
-      enable = true;
-      ip = "100.89.175.1/24";
-      domain = "i.jakstys.lt";
-      passwordFile = config.age.secrets.iodine-passwd.path;
-      #extraConfig = "-c -b ${toString myData.ports.nsd-unwrapped}";
-      extraConfig = "-c";
-    };
-
     nsd = {
       enable = true;
-      port = myData.ports.nsd-unwrapped;
       interfaces = [
         "0.0.0.0"
         "::"
diff --git a/hosts/mtworx/configuration.nix b/hosts/mtworx/configuration.nix
index d7962af..e524657 100644
--- a/hosts/mtworx/configuration.nix
+++ b/hosts/mtworx/configuration.nix
@@ -1,5 +1,4 @@
 {
-  lib,
   config,
   pkgs,
   myData,
@@ -21,7 +20,6 @@ in
     motiejus-work-passwd-hash.file = ../../secrets/motiejus_work_passwd_hash.age;
     root-work-passwd-hash.file = ../../secrets/root_work_passwd_hash.age;
     sasl-passwd.file = ../../secrets/postfix_sasl_passwd.age;
-    iodine-passwd.file = ../../secrets/iodine.age;
 
     syncthing-key.file = ../../secrets/mtworx/syncthing/key.pem.age;
     syncthing-cert.file = ../../secrets/mtworx/syncthing/cert.pem.age;
@@ -178,16 +176,7 @@ in
     };
   };
 
-  # Comment this to enable iodione client
-  systemd.services.iodine-fra1-b.wantedBy = lib.mkForce [ ];
-
   services = {
-    iodine.clients.fra1-b = {
-      server = "i.jakstys.lt";
-      passwordFile = config.age.secrets.iodine-passwd.path;
-      extraConfig = "-L0";
-      #relay = "1.1.1.1";
-    };
     tlp = {
       enable = true;
       settings = {
diff --git a/secrets.nix b/secrets.nix
index a053664..24b2477 100644
--- a/secrets.nix
+++ b/secrets.nix
@@ -71,5 +71,4 @@ in
   "secrets/root_passwd_hash.age"
   "secrets/postfix_sasl_passwd.age"
   "secrets/ssh8022.age"
-  "secrets/iodine.age"
 ]
diff --git a/secrets/iodine.age b/secrets/iodine.age
deleted file mode 100644
index 805e5a4..0000000
Binary files a/secrets/iodine.age and /dev/null differ