diff --git a/group_vars/all b/group_vars/all
index 5d54a1e..9688fa8 100644
--- a/group_vars/all
+++ b/group_vars/all
@@ -59,6 +59,13 @@ network:
         - d2642f7e-9e58-4b00-82f8-26b4ef76a54e
         - f74f2bd5-8748-4e1e-98f9-dae2dd44b916
         - a04ea39b-eca8-39d0-9b4a-45badc25b359
+    excluded_networks:
+        # Docker
+        - docker*
+        - br-*
+        # libvirt
+        - virbr*
+        - vnet*
 
 editors:
     - gvim
diff --git a/roles/nmtrust/tasks/main.yml b/roles/nmtrust/tasks/main.yml
index cc7a28f..f5d7243 100644
--- a/roles/nmtrust/tasks/main.yml
+++ b/roles/nmtrust/tasks/main.yml
@@ -17,6 +17,11 @@
       src: trusted_networks.j2
       dest: /etc/nmtrust/trusted_networks
 
+- name: Push excluded network list
+  template:
+      src: excluded_networks.j2
+      dest: /etc/nmtrust/excluded_networks
+
 - name: Verify trusted unit list exists
   copy:
       content: ""
diff --git a/roles/nmtrust/templates/excluded_networks.j2 b/roles/nmtrust/templates/excluded_networks.j2
new file mode 100644
index 0000000..772b2b1
--- /dev/null
+++ b/roles/nmtrust/templates/excluded_networks.j2
@@ -0,0 +1,4 @@
+# {{ ansible_managed }}
+{% for network in network.excluded_networks %}
+{{ network }}
+{% endfor %}