diff --git a/hosts/nullbox/mcserver.nix b/hosts/nullbox/mcserver.nix
index 645aeb8..33c1fe7 100644
--- a/hosts/nullbox/mcserver.nix
+++ b/hosts/nullbox/mcserver.nix
@@ -2,5 +2,6 @@
 {
   config = {
     fileSystems."/srv/mcserver".options = [ "compress=zstd" "nofail" ];
+    networking.firewall.trustedInterfaces = [ "wg0" ];
   };
 }