diff --git a/nixos/modules/services/networking/zerotierone.nix b/nixos/modules/services/networking/zerotierone.nix
index 6237f95b127..e66648f683f 100644
--- a/nixos/modules/services/networking/zerotierone.nix
+++ b/nixos/modules/services/networking/zerotierone.nix
@@ -26,6 +26,10 @@ in
         KillMode = "process";
       };
     };
-  environment.systemPackages = [ pkgs.zerotierone ];
+
+    # ZeroTier does not issue DHCP leases, but some strangers might...
+    networking.dhcpcd.denyInterfaces = [ "zt0" ];
+
+    environment.systemPackages = [ pkgs.zerotierone ];
   };
 }