diff --git a/nixos/hosts/osaka-vultr-01/default.nix b/nixos/hosts/osaka-vultr-01/default.nix
index 37a55f43..68c3e653 100644
--- a/nixos/hosts/osaka-vultr-01/default.nix
+++ b/nixos/hosts/osaka-vultr-01/default.nix
@@ -60,8 +60,8 @@
   };
 
   networking.firewall.extraCommands = "
-    ${pkgs.iptables}/bin/ -t nat -A POSTROUTING -d 10.100.0.2 -p tcp -m tcp --dport 80   -j MASQUERADE
-    ${pkgs.iptables}/bin/ -t nat -A POSTROUTING -d 10.100.0.2 -p tcp -m tcp --dport 443  -j MASQUERADE
+    ${pkgs.iptables}/bin/iptables -t nat -A POSTROUTING -d 10.100.0.2 -p tcp -m tcp --dport 80   -j MASQUERADE
+    ${pkgs.iptables}/bin/iptables -t nat -A POSTROUTING -d 10.100.0.2 -p tcp -m tcp --dport 443  -j MASQUERADE
   ";
   networking.nat = {
     enable = true;