diff --git a/machine-confs/helium.nix b/machine-confs/helium.nix
index 42e18e3..7affb4e 100644
--- a/machine-confs/helium.nix
+++ b/machine-confs/helium.nix
@@ -3,8 +3,6 @@
   networking = {
     hostName = "helium";
 
-    firewall.allowedUDPPorts = [ 51820 ];
-
     wg-quick.interfaces = {
       wg0 = {
         autostart = true;
@@ -56,6 +54,11 @@
     Restart = "on-failure";
     RestartSec = "1s";
   };
+  services.clatd = {
+    enable = true;
+    settings.clat-v6-addr = "2001:14ba:a08c:2df0::f2";
+  };
+  systemd.services.clatd.wants = [ "wg-quick-wg0.service" ];
 
   services.openssh.enable = pkgs.lib.mkForce false;
   services.fail2ban.enable = pkgs.lib.mkForce false;