diff --git a/deploy/helm/wg-access-server/templates/service.yaml b/deploy/helm/wg-access-server/templates/service.yaml
index 6734eab7..0e373ed9 100644
--- a/deploy/helm/wg-access-server/templates/service.yaml
+++ b/deploy/helm/wg-access-server/templates/service.yaml
@@ -39,7 +39,7 @@ metadata:
 {{- end }}
 spec:
   type: {{ .Values.wireguard.service.type }}
-  sessionAffinity: ClientIP
+  sessionAffinity: {{ .Values.wireguard.service.sessionAffinity }}
 {{- if .Values.wireguard.service.externalTrafficPolicy }}
   externalTrafficPolicy: {{ .Values.wireguard.service.externalTrafficPolicy }}
 {{- end }}
diff --git a/deploy/helm/wg-access-server/values.yaml b/deploy/helm/wg-access-server/values.yaml
index e54f5cad..0a218070 100644
--- a/deploy/helm/wg-access-server/values.yaml
+++ b/deploy/helm/wg-access-server/values.yaml
@@ -12,6 +12,7 @@ wireguard:
   config:
     privateKey: ""
   service:
+    sessionAffinity: ClientIP
     type: ClusterIP
 
 persistence: