diff --git a/hosts/falkenstein/modules/networks/default.nix b/hosts/falkenstein/modules/networks/default.nix
index 33dc1d7..7cacf9b 100644
--- a/hosts/falkenstein/modules/networks/default.nix
+++ b/hosts/falkenstein/modules/networks/default.nix
@@ -87,8 +87,15 @@
     };
     networks."30-dorm" = {
       matchConfig.Name = "wg0";
+      addresses = [
+        {
+          addressConfig = {
+            Address = "192.168.43.4/24";
+            AddPrefixRoute = false;
+          };
+        }
+      ];
       networkConfig = {
-        Address = "192.168.43.4/32";
         DNS = "192.168.43.1";
         Domains = [
           "~vpn.rfive.de"
diff --git a/hosts/thinkpad/modules/networks/default.nix b/hosts/thinkpad/modules/networks/default.nix
index adfaf20..61290b4 100644
--- a/hosts/thinkpad/modules/networks/default.nix
+++ b/hosts/thinkpad/modules/networks/default.nix
@@ -163,8 +163,15 @@
     networks."30-wg0" = {
       matchConfig.Name = "wg0";
       linkConfig.RequiredForOnline = false;
+      addresses = [
+        {
+          addressConfig = {
+            Address = "192.168.43.3/24";
+            AddPrefixRoute = false;
+          };
+        }
+      ];
       networkConfig = {
-        Address = "192.168.43.3/32";
         DNS = "192.168.43.1";
         Domains = [
           "~vpn.rfive.de"
diff --git a/hosts/thinkpad/modules/networks/uni.nix b/hosts/thinkpad/modules/networks/uni.nix
index 7c86553..0b4855e 100644
--- a/hosts/thinkpad/modules/networks/uni.nix
+++ b/hosts/thinkpad/modules/networks/uni.nix
@@ -95,7 +95,7 @@
   systemd.services = {
     openfortivpn-agdsn = {
       description = "AG DSN Fortinet VPN";
-      script = "${pkgs.openfortivpn}/bin/openfortivpn vpn.agdsn.de:443 --realm admin-vpn -u r5 -p $(cat $CREDENTIALS_DIRECTORY/password) --trusted-cert bbbe0df79764c5f1bd4b332e449e43a40e43eec57c983a1e75a1896e6eae4da5";
+      script = "${pkgs.openfortivpn}/bin/openfortivpn vpn.agdsn.de:443 --realm admin-vpn -u r5 -p $(cat $CREDENTIALS_DIRECTORY/password)";
       requires = [ "network-online.target" ];
       after = [ "network.target" "network-online.target" ];
       serviceConfig = {