diff --git a/modules/wg/mgmt.nix b/modules/wg/mgmt.nix
index 87bf9e8..33f483e 100644
--- a/modules/wg/mgmt.nix
+++ b/modules/wg/mgmt.nix
@@ -1,5 +1,6 @@
 { config, ... }:
 {
+  networking.firewall.trustedInterfaces = [ "wg-0xa-mgmt" ];
   oxalab.wg = [
     {
       networkName = "0xa-mgmt";