diff --git a/machines/ash.nix b/machines/ash.nix
index cb01ce9..4488540 100644
--- a/machines/ash.nix
+++ b/machines/ash.nix
@@ -60,7 +60,7 @@ in {
 
     firewall = {
       allowedTCPPorts = [22];
-      allowedUDPPorts = [51820];
+      allowedUDPPorts = [8000];
       interfaces.wg0 = {
         allowedTCPPorts = [53];
         allowedUDPPorts = [53];
@@ -70,7 +70,7 @@ in {
     wireguard.interfaces.wg0 = {
       # may need to change this to the same base as the full network
       ips = ["172.20.21.0/24"];
-      listenPort = 51820;
+      listenPort = 8000;
       privateKeyFile = "/run/agenix/wireguard";
 
       peers = [