diff --git a/tasks/sysctl-setup.yml b/tasks/sysctl-setup.yml
index a5e3abb..dc1a49f 100644
--- a/tasks/sysctl-setup.yml
+++ b/tasks/sysctl-setup.yml
@@ -7,12 +7,12 @@
     ansible_distribution != 'Debian'
     or ansible_distribution_major_version | int < 10
 
-# - name: Ensure module br_netfilter is loaded
-#   modprobe:
-#     name: br_netfilter
-#     state: present
-#     persistent: present
-#   when: not ansible_virtualization_type == "docker"
+- name: Ensure module br_netfilter is loaded
+  modprobe:
+    name: br_netfilter
+    state: present
+    persistent: present
+  when: not ansible_virtualization_type == "docker"
 
 # See: https://kubernetes.io/docs/setup/production-environment/tools/kubeadm/install-kubeadm/#letting-iptables-see-bridged-traffic
 - name: Let iptables see bridged traffic.
@@ -24,5 +24,6 @@
     - net.bridge.bridge-nf-call-iptables
     - net.bridge.bridge-nf-call-ip6tables
   when: >
-    ansible_distribution != 'Debian'
-    or ansible_distribution_major_version | int < 10
+    ( ansible_distribution != 'Debian'
+      or ansible_distribution_major_version | int < 10
+    ) and not ansible_virtualization_type == "docker"