diff --git a/ansible/playbooks/templates/calico-installation.yaml.j2 b/ansible/playbooks/templates/calico-installation.yaml.j2
index 8e28a922..ca127b7c 100644
--- a/ansible/playbooks/templates/calico-installation.yaml.j2
+++ b/ansible/playbooks/templates/calico-installation.yaml.j2
@@ -7,6 +7,8 @@ spec:
   registry: quay.io
   imagePath: calico
   calicoNetwork:
+    # https://docs.k3s.io/installation/network-options#custom-cni
+    containerIPForwarding: "Enabled"
     # https://projectcalico.docs.tigera.io/networking/ip-autodetection
     nodeAddressAutodetectionV4:
       cidrs: