diff --git a/client/internal/engine.go b/client/internal/engine.go
index 0f66f5a4e..3a868657b 100644
--- a/client/internal/engine.go
+++ b/client/internal/engine.go
@@ -952,7 +952,7 @@ func (e *Engine) createPeerConn(pubKey string, allowedIPs string) (*peer.Conn, e
 		RosenpassPubKey: e.getRosenpassPubKey(),
 		RosenpassAddr:   e.getRosenpassAddr(),
 		ICEConfig: peer.ICEConfig{
-			StunTurn:             e.StunTurn,
+			StunTurn:             &e.StunTurn,
 			InterfaceBlackList:   e.config.IFaceBlackList,
 			DisableIPv6Discovery: e.config.DisableIPv6Discovery,
 			UDPMux:               e.udpMux.UDPMuxDefault,
diff --git a/client/internal/peer/worker_ice.go b/client/internal/peer/worker_ice.go
index 26f3d04ab..0edb124cf 100644
--- a/client/internal/peer/worker_ice.go
+++ b/client/internal/peer/worker_ice.go
@@ -38,7 +38,7 @@ var (
 
 type ICEConfig struct {
 	// StunTurn is a list of STUN and TURN URLs
-	StunTurn atomic.Value // []*stun.URI
+	StunTurn *atomic.Value // []*stun.URI
 
 	// InterfaceBlackList is a list of machine interfaces that should be filtered out by ICE Candidate gathering
 	// (e.g. if eth0 is in the list, host candidate of this interface won't be used)