diff --git a/etc/bastion/bastion.conf.dist b/etc/bastion/bastion.conf.dist
index 3e98851..c4409e6 100644
--- a/etc/bastion/bastion.conf.dist
+++ b/etc/bastion/bastion.conf.dist
@@ -88,7 +88,7 @@
 # ingressKeysFromAllowOverride (boolean-int, i.e. 0 or 1), aliases: ipWhiteListAllowOverride (deprecated)
 #    DESC: If set to 0 (false), any from="..." specified in user keys (selfAddIngressKey or accountCreate) are ignored and replaced by the IPs in the ingressKeysFrom configuration option (if any).
 #          If set to 1 (true), any from="..." specified in user keys (selfAddIngressKey or accountCreate) will override the value set in ingressKeysFrom (if any). When no user-specified from="..." appears, the value of ingressKeysFrom is still used, regardless of this option.
-# DEFAULT: 0
+# DEFAULT: 1
 "ingressKeysFromAllowOverride": 1,
 #
 # accountUidMin (int)