diff --git a/modules/k8s.nix b/modules/k8s.nix
index 42c4744..002aa7e 100644
--- a/modules/k8s.nix
+++ b/modules/k8s.nix
@@ -263,8 +263,8 @@ let
       enable = true;
       wantedBy = [ "kubernetes.target" ];
       after = [ "kubelet.target" ];
-      description = "Proxy TCP port 443 to ingress NodePort at 32443";
-      script = "${pkgs.socat}/bin/socat TCP-LISTEN:443,fork,reuseaddr TCP:127.0.0.1:32443";
+      description = "Proxy TCP port 443 to ingress NodePort at 30443";
+      script = "${pkgs.socat}/bin/socat TCP-LISTEN:443,fork,reuseaddr TCP:127.0.0.1:30443";
       serviceConfig = {
         RestartSec = "10s";
         Restart = "on-failure";