diff --git a/assets/compose b/assets/compose
index a79fe9d..293429a 160000
--- a/assets/compose
+++ b/assets/compose
@@ -1 +1 @@
-Subproject commit a79fe9dffacebae6d4ee17502885e9cdfa852073
+Subproject commit 293429a124f72e75e4f29620bb3fb9ec201d03d3
diff --git a/hosts/lazyworkhorse/configuration.nix b/hosts/lazyworkhorse/configuration.nix
index 3963650..a74ec09 100644
--- a/hosts/lazyworkhorse/configuration.nix
+++ b/hosts/lazyworkhorse/configuration.nix
@@ -221,6 +221,11 @@
       path = self + "/assets/compose/homepage";
     };
 
+    vpn = {
+      path = self + "/assets/compose/vpn";
+      envFile = config.age.secrets.containers_env.path;
+    };
+
     # tak = {
     #   path = self + "/assets/compose/tak";
     # };
@@ -332,7 +337,7 @@
     ];
     
     allowedUDPPorts = [
-      # Add UDP ports if required
+      51820 # WireGuard VPN
     ];
     
     # Rate limiting and attack prevention