diff --git a/modules/services/unbound.nix b/modules/services/unbound.nix
index 34eefe0..62732c9 100644
--- a/modules/services/unbound.nix
+++ b/modules/services/unbound.nix
@@ -34,7 +34,7 @@ in {
           "127.0.0.1/8      allow"
           "10.0.0.0/8       allow"
           "192.168.100.0/24 allow"
-          "${gcSecrets.wireguard.ipv6Subnet}/80 allow"
+          "${gcSecrets.wireguard.ipv6Subnet}:/80 allow"
         ];
         domain-insecure = [ "\"local.lava.moe\"" ];
         local-zone = [ "\"warden.local.lava.moe.\" redirect" ];