diff --git a/config/services/immich.nix b/config/services/immich.nix
index e900195..eef968c 100644
--- a/config/services/immich.nix
+++ b/config/services/immich.nix
@@ -252,7 +252,7 @@ in
     after = [ "conntrack" ];
     rules = [
       "iifname services ip saddr ${nodes.nucnix-nginx.config.wireguard.services.ipv4} tcp dport 2283 accept"
-      "iifname podman1 oifname lan accept"
+      "iifname podman1 oifname lan-services accept"
     ];
   };
   systemd.tmpfiles.settings = {