diff --git a/files/nspawn-nat.service b/files/nspawn-nat.service
index df2058ca6ebe27cd40ef694415e62f6f683ed2c4..d20a7d24bfed9eef25022b274aec8d731461286f 100644
--- a/files/nspawn-nat.service
+++ b/files/nspawn-nat.service
@@ -9,7 +9,7 @@ Type=oneshot
 RemainAfterExit=yes
 Environment=network="192.168.123.0/24"
 ExecStart=/sbin/iptables -w -t nat -A POSTROUTING -s "$network" ! -d "$network" -j MASQUERADE
-ExecStop=/sbin/iptables -w -t nat -D POSTROUTING -s 192.168.123.0/24 ! -d 192.168.123.0/24 -j MASQUERADE
+ExecStop=/sbin/iptables -w -t nat -D POSTROUTING -s "$network" ! -d "$network" -j MASQUERADE
 
 [Install]
 WantedBy=network.target