diff --git a/roles/base/tasks/wireguard.yml b/roles/base/tasks/wireguard.yml
index efc3ddc..b3ba047 100644
--- a/roles/base/tasks/wireguard.yml
+++ b/roles/base/tasks/wireguard.yml
@@ -35,5 +35,5 @@
   community.general.ufw:
     rule: allow
     port: "{{ wireguard.listenport }}"
-    proto: tcp
+    proto: udp
   when: wireguard.listenport is defined