diff --git a/firewall.tf b/firewall.tf
index 5e8d56d..940be03 100644
--- a/firewall.tf
+++ b/firewall.tf
@@ -22,8 +22,8 @@ resource "hcloud_firewall" "ssh" {
     protocol  = "tcp"
     port      = "22"
     source_ips = [
-      var.ows_gateway.ipv4,
-      var.ows_gateway.ipv6
+      var.bastion_host.ipv4,
+      var.bastion_host.ipv6
     ]
   }
   apply_to {
diff --git a/main.tf b/main.tf
index 51e66c5..9a2d0fc 100644
--- a/main.tf
+++ b/main.tf
@@ -32,3 +32,6 @@ provider "ionosdeveloper" {
 
 # Public SSH Key
 variable "dtsv_hcloud_ssh_key" {}
+
+# Bastion Host IP
+variable "bastion_host" {}