diff --git a/ai/Dockerfile b/ai/Dockerfile
index edbb07f..1edd524 100644
--- a/ai/Dockerfile
+++ b/ai/Dockerfile
@@ -21,8 +21,7 @@ RUN apt-get update && \
         texlive-latex-base texlive-latex-extra texlive-fonts-recommended texlive-xetex texlive-science \
         qemu-user-static binfmt-support qemu-user-binfmt \
         emacs-nox \
-        libportaudio2 \
-        wireguard-tools openresolv && \
+        libportaudio2 && \
     rm -rf /var/lib/apt/lists/*
 
 # Non-root user for runtime; UID can be overridden via HERMES_UID at runtime
diff --git a/ai/compose.yml b/ai/compose.yml
index a612889..fa3b84c 100644
--- a/ai/compose.yml
+++ b/ai/compose.yml
@@ -29,8 +29,6 @@ services:
     build: ./
     container_name: hermes
     restart: always
-    cap_add:
-      - NET_ADMIN
     # Gateway run enables the internal API server on port 8642
     command: gateway run
     environment: