diff --git a/nix/nixos-module/container/upstream.nix b/nix/nixos-module/container/upstream.nix
index 082fb66..2bbeae3 100644
--- a/nix/nixos-module/container/upstream.nix
+++ b/nix/nixos-module/container/upstream.nix
@@ -99,7 +99,7 @@ in
       ${lib.optionalString (staticIpv4Address != null) ''
         # Allow connections to ${staticIpv4Address} from other hosts behind NAT
         ${lib.concatMapStrings (fwd: ''
-          iptables -t nat -t nat -A nixos-nat-pre \
+          iptables -t nat -A nixos-nat-pre \
             -d ${staticIpv4Address} -p ${fwd.proto} \
             --dport ${builtins.toString fwd.sourcePort} \
             -j DNAT --to-destination ${fwd.destination}