diff --git a/nixos/hosts/osaka-linode-01/firewall.nix b/nixos/hosts/osaka-linode-01/firewall.nix
index c400da1e..d146ecaa 100644
--- a/nixos/hosts/osaka-linode-01/firewall.nix
+++ b/nixos/hosts/osaka-linode-01/firewall.nix
@@ -35,12 +35,12 @@
       internalInterfaces = [ "enp0s4" ];
       externalInterface = "wireguard0";
       forwardPorts =  [
-        { destination = "10.100.0.2:80";     proto = "tcp"; sourcePort = 80;    } # HTTP
-        { destination = "10.100.0.2:443";    proto = "tcp"; sourcePort = 443;   } # HTTPS
-        { destination = "10.100.0.2:42420";  proto = "tcp"; sourcePort = 42420; } # Vintage Story
-        { destination = "10.100.0.2:25565";  proto = "tcp"; sourcePort = 25565; } # Minecraft
-        { destination = "10.100.0.2:1443";   proto = "tcp"; sourcePort = 1443;  } # Headscale DERP (tcp)
-        { destination = "10.100.0.2:3478";   proto = "udp"; sourcePort = 3478;  } # Headscale DERP (udp)
+        { sourcePort = 80;    proto = "tcp"; destination = "10.100.0.2:80";    } # HTTP
+        { sourcePort = 443;   proto = "tcp"; destination = "10.100.0.2:443";   } # HTTPS
+        { sourcePort = 42420; proto = "tcp"; destination = "10.100.0.2:42420"; } # Vintage Story
+        { sourcePort = 25565; proto = "tcp"; destination = "10.100.0.2:25565"; } # Minecraft
+        { sourcePort = 1443;  proto = "tcp"; destination = "10.100.0.2:1443";  } # Headscale DERP (tcp)
+        { sourcePort = 3478;  proto = "udp"; destination = "10.100.0.2:3478";  } # Headscale DERP (udp)
       ];
     };
   };