diff --git a/inventory/group_vars/openqa_workers b/inventory/group_vars/openqa_workers
index f7c3d89726..8543c80596 100644
--- a/inventory/group_vars/openqa_workers
+++ b/inventory/group_vars/openqa_workers
@@ -7,7 +7,7 @@ ipa_client_sudo_groups:
   - sysadmin-qa
 ipa_host_group: openqa-workers
 ipa_host_group_desc: OpenQA worker hosts
-nftables: False
+nftables: true
 openqa_env: production
 openqa_env_prefix:
 # this is because openqa staging isn't really a staging host