diff --git a/nixos/hosts/osaka-linode-01/firewall.nix b/nixos/hosts/osaka-linode-01/firewall.nix
index 787c9c4e..11069ef6 100644
--- a/nixos/hosts/osaka-linode-01/firewall.nix
+++ b/nixos/hosts/osaka-linode-01/firewall.nix
@@ -32,8 +32,8 @@
 
     nat = {
       enable = true;
-      internalInterfaces = [ "wireguard0" ];
-      externalInterface = "enp0s4";
+      internalInterfaces = [ "enp0s4" ];
+      externalInterface = "wireguard0";
       forwardPorts =  [
         { destination = "10.100.0.2:80";     proto = "tcp"; sourcePort = 80;    } # HTTP
         { destination = "10.100.0.2:443";    proto = "tcp"; sourcePort = 443;   } # HTTPS