diff --git a/deploy/idunn-yggdrasil.service b/deploy/idunn-yggdrasil.service
index 7ec1351..6717dbe 100644
--- a/deploy/idunn-yggdrasil.service
+++ b/deploy/idunn-yggdrasil.service
@@ -68,7 +68,6 @@ ProtectHome=yes
 ProtectSystem=full
 ReadWritePaths=/etc/gamecult/idunn
 ReadWritePaths=/etc/nginx/idunn-stream-routes
-ReadWritePaths=/etc/ufw
 # ufw keeps its rule files under /etc/ufw; the route driver owns one allow per
 # routed stable endpoint and writes it through ufw.
 ReadWritePaths=/etc/systemd/system