diff --git a/playbooks/services/wireguard-cerberus.yml b/playbooks/services/wireguard-cerberus.yml
index 19b6320..a85c852 100644
--- a/playbooks/services/wireguard-cerberus.yml
+++ b/playbooks/services/wireguard-cerberus.yml
@@ -1,6 +1,8 @@
 - name: cerberos init
   hosts: wireguard-cerberus
   become: true
+  vars:
+    wireguard_interface: eth0
   tasks:
     - name: wireguard-server
       ansible.builtin.include_role:
diff --git a/roles/wireguard_server/templates/wireguardserver.conf b/roles/wireguard_server/templates/wireguardserver.conf
index e9c486e..bf9ec6e 100644
--- a/roles/wireguard_server/templates/wireguardserver.conf
+++ b/roles/wireguard_server/templates/wireguardserver.conf
@@ -1,8 +1,8 @@
 [Interface]
 PrivateKey = {{ vars['wireguard-server-vault']['key'] }}
 Address=10.0.0.1/24
-PostUp=iptables -A FORWARD -i wireguardserver -o ens18 -j ACCEPT; iptables -A FORWARD -i ens18 -o wireguardserver -j ACCEPT; iptables -t nat -A POSTROUTING -o ens18 -j MASQUERADE;
-PostDown=iptables -D FORWARD -i wireguardserver -o ens18 -j ACCEPT; iptables -D FORWARD -i ens18 -o wireguardserver -j ACCEPT; iptables -t nat -D POSTROUTING -o ens18 -j MASQUERADE;
+PostUp=iptables -A FORWARD -i wireguardserver -o {{ wireguard_interface }} -j ACCEPT; iptables -A FORWARD -i {{ wireguard_interface }} -o wireguardserver -j ACCEPT; iptables -t nat -A POSTROUTING -o {{ wireguard_interface }} -j MASQUERADE;
+PostDown=iptables -D FORWARD -i wireguardserver -o {{ wireguard_interface }} -j ACCEPT; iptables -D FORWARD -i {{ wireguard_interface }} -o wireguardserver -j ACCEPT; iptables -t nat -D POSTROUTING -o {{ wireguard_interface }} -j MASQUERADE;
 ListenPort={{ vars['wireguard-server']['internal-port'] }}
 
 {% for client_name, client_data in vars['wireguard-client'].items() %}