diff --git a/core/headscale/main.go b/core/headscale/main.go
index b9dbc22..1ca4f6b 100644
--- a/core/headscale/main.go
+++ b/core/headscale/main.go
@@ -20,19 +20,16 @@
 // TODO(gio): ingress-private user name must be configurable
 const defaultACLs = `
 {
-  "hosts": {
-    "private-network": "10.1.0.0/24",
-  },
   "autoApprovers": {
     "routes": {
-      "private-network": ["private-network-proxy@{{ .Domain }}"],
+      "10.1.0.0/24": ["private-network-proxy@{{ .Domain }}"],
     },
   },
   "acls": [
     { // Everyone can access ingress-private service
       "action": "accept",
       "src": ["*"],
-      "dst": ["private-network:*"],
+      "dst": ["10.1.0.0/24:*"],
     },
   ],
 }