diff --git a/eturnal/rootfs/usr/sbin/run.sh b/eturnal/rootfs/usr/sbin/run.sh
index 7f1acac207..d0bc0c6ad9 100644
--- a/eturnal/rootfs/usr/sbin/run.sh
+++ b/eturnal/rootfs/usr/sbin/run.sh
@@ -4,10 +4,6 @@
 cat > /opt/eturnal/etc/eturnal.yml <<EOF
 eturnal:
   listen:
-    -
-      ip: "::"
-      port: 3478
-      transport: udp
     -
       ip: "::"
       port: 3478
@@ -18,7 +14,7 @@ eturnal:
   blacklist:                # This is the default blacklist.
     - "127.0.0.0/8"         # IPv4 loopback.
     - "::1"                 # IPv6 loopback.
-    #- recommended          # Expands to a number of networks recommended to be
+    - recommended           # Expands to a number of networks recommended to be
                             # blocked, but includes private networks. Those
                             # would have to be 'whitelist'ed if eturnal serves
                             # local clients/peers within such networks.
diff --git a/web/rootfs/defaults/turn b/web/rootfs/defaults/turn
index f8b61fb47d..012a05a68b 100644
--- a/web/rootfs/defaults/turn
+++ b/web/rootfs/defaults/turn
@@ -5,11 +5,6 @@
         proxy_pass  eturnal:3478;
         proxy_protocol on;
     }
-
-    server {
-        listen      3478 udp;
-        proxy_pass  eturnal:3478;
-    }
 {{ end }}
   {{ if .Env.TURNS_HOST }}
     map $ssl_preread_server_name $name {