diff --git a/config/services/grafana.nix b/config/services/grafana.nix
index 9dc747b0..f6e1ea24 100644
--- a/config/services/grafana.nix
+++ b/config/services/grafana.nix
@@ -1,7 +1,7 @@
 { config, pkgs, ... }:
 let
   removeCIDR = cidr: builtins.elemAt (builtins.split "/" cidr) 0;
-  filterIPs = cidrs: builtins.map "${removeCIDR cidrs}";
+  filterIPs = cidrs: builtins.map (f: "[${removeCIDR f}]") cidrs;
   listenIPs = filterIPs config.networking.wireguard.interfaces."wg0".ips;
 in
 {