diff --git a/nixos/hosts/osaka-vultr-01/default.nix b/nixos/hosts/osaka-vultr-01/default.nix
index 72b8b6a5..1bff6d3d 100644
--- a/nixos/hosts/osaka-vultr-01/default.nix
+++ b/nixos/hosts/osaka-vultr-01/default.nix
@@ -34,6 +34,9 @@
     sopsFile = ../../../secrets/wireguard.yaml;
   };
 
+  networking.nat.enable = true;
+  networking.nat.externalInterface = "eno3";
+  networking.nat.internalInterfaces = [ "wireguard0" ];
   # Wireguard Forwarder
   boot.kernel.sysctl = { "net.ipv4.ip_forward" = true; };
   networking.firewall.allowPing = true;