diff --git a/src/cli/ai/index.ts b/src/cli/ai/index.ts
index 870bc41f..2c63d396 100644
--- a/src/cli/ai/index.ts
+++ b/src/cli/ai/index.ts
@@ -87,8 +87,8 @@ const validateAiConfig = async () => {
     const skeetConfig: SkeetCloudConfig = JSON.parse(String(config))
     if (!skeetConfig.ai) {
       skeetConfig.ai = defaultAiConfig
+      writeFileSync(SKEET_CONFIG_PATH, JSON.stringify(skeetConfig, null, 2))
     }
-    writeFileSync(SKEET_CONFIG_PATH, JSON.stringify(skeetConfig, null, 2))
   } catch (error) {
     const skeetConfig = {
       ai: defaultAiConfig,
diff --git a/src/templates/init/skeet-cloud.config.ts b/src/templates/init/skeet-cloud.config.ts
index ccac05c4..9a2c0c33 100644
--- a/src/templates/init/skeet-cloud.config.ts
+++ b/src/templates/init/skeet-cloud.config.ts
@@ -98,9 +98,9 @@ export const skeetCloudConfigGen = async (
         },
         {
           "priority": "2147483647",
-          "description": "Deny All IP addresses",
+          "description": "Allow/Deny All IP addresses. default: allow",
           "options": {
-            "action": "deny-403"
+            "action": "allow"
           }
         }
       ]