diff --git a/modules/system/security/blocklist/default.nix b/modules/system/security/blocklist/default.nix
index e833486..c2035ad 100644
--- a/modules/system/security/blocklist/default.nix
+++ b/modules/system/security/blocklist/default.nix
@@ -10,6 +10,7 @@ in {
     systemSettings.security.blocklist = {
       enable = lib.mkEnableOption "Enable basic host blocking for bad websites";
       allowedHosts = lib.mkOption {
+        default = [ ];
         description = "List of hosts to allow (remove from blocklist)";
         type = lib.types.listOf lib.types.str;
       };