Option to disable Public IP on all resources

There should be an easier to specify no public IPs especially if deploying to an existing virtual network.
I’m not an expert with ARM templates yet but would it be easier to specify the virtual net, deploy the group then remove the public IPs or to go through the entire template and figure out where Public IPs are specified then modify the template?