diff --git a/paws/values.yaml b/paws/values.yaml
index 6342a590..0a7644d4 100644
--- a/paws/values.yaml
+++ b/paws/values.yaml
@@ -299,23 +299,20 @@ jupyterhub:
       REFINE_DOMAIN: "*"  # Check jupyterhub.ingress.hosts
     networkPolicy:
       egressAllowRules:
-        privateIPs: true  # Allow all connections to private IPs, needed for access to replicas
-        nonPrivateIPs: false # Block all connections to non-private IPs, except the ones allowed below
+        privateIPs: true  # Allow connections to private IPs, needed for access to replicas
+        nonPrivateIPs: false # Block connections to non-private IPs, except the ones allowed below
       egress:
         # Allow connections to non-private IPs only for TCP ports 80 and 443
         # and for UDP ports 53 (DNS) and 123 (NTP)
-        - to:
-            - ipBlock:
-                cidr: 0.0.0.0/0
-              ports:
-                - protocol: TCP
-                  port: 80
-                - protocol: TCP
-                  port: 443
-                - protocol: UDP
-                  port: 53
-                - protocol: UDP
-                  port: 123
+        - ports:
+            - protocol: TCP
+              port: 80
+            - protocol: TCP
+              port: 443
+            - protocol: UDP
+              port: 53
+            - protocol: UDP
+              port: 123
 # mysql configures the wiki replica backend variables
 mysql:
   domain: "svc.cluster.local"