diff --git a/modules/nixos/system/network/base/default.nix b/modules/nixos/system/network/base/default.nix
index da4cb32..d07ca16 100644
--- a/modules/nixos/system/network/base/default.nix
+++ b/modules/nixos/system/network/base/default.nix
@@ -7,12 +7,12 @@
     firewall = { 
       enable = true;
       allowedUDPPorts = 
-        (if config.syscfg.server && config.syscfg.server.wireguard then [ 1515 ] else [ ]) ++ 
-        (if config.syscfg.server && config.syscfg.server.web then [ 80 443 22 ] else [ ]) ++ 
+        (if (config.syscfg.server && config.syscfg.server.wireguard) then [ 1515 ] else [ ]) ++ 
+        (if (config.syscfg.server && config.syscfg.server.web) then [ 80 443 22 ] else [ ]) ++ 
         [ ];
 
       allowedTCPPorts = 
-        (if config.syscfg.server && config.syscfg.server.web then [ 80 443 22 ] else [ ]) ++ 
+        (if (config.syscfg.server && config.syscfg.server.web) then [ 80 443 22 ] else [ ]) ++ 
         [ ];
     };
   };