diff --git a/modules/system/tailscale.nix b/modules/system/tailscale.nix
index 79cbba9..5da4652 100644
--- a/modules/system/tailscale.nix
+++ b/modules/system/tailscale.nix
@@ -16,6 +16,7 @@
       }
     ];
   };
+  networking.firewall.allowedTCPPorts = [ 50300 ];
   services.tailscale = {
     enable = true;
     authKeyFile = config.age.secrets.tailscale_auth.path;