diff --git a/m/apex/wireguard.nix b/m/apex/wireguard.nix
index 607564f..0a6ac5f 100644
--- a/m/apex/wireguard.nix
+++ b/m/apex/wireguard.nix
@@ -20,7 +20,7 @@
         {
           name = "fox";
           publicKey = "VfMPBQLQTKeyXJSwv8wBhc6OV0j2qAxUpX3kLHunK2Y=";
-          allowedIPs = [ "10.106.0.0/24" ];
+          allowedIPs = [ "10.106.0.1/32" ];
           endpoint = "fox.ac.upc.edu:666";
           # Send keepalives every 25 seconds. Important to keep NAT tables alive.
           persistentKeepalive = 25;