diff --git a/modules/services/nginx.nix b/modules/services/nginx.nix
index 4b01c80..b0aa596 100644
--- a/modules/services/nginx.nix
+++ b/modules/services/nginx.nix
@@ -1,4 +1,5 @@
 { config, inputs, ... }: {
+  networking.firewall.allowedTCPPorts = [ 80 443 ];
   security.acme = {
     acceptTerms = true;
     email = "me@lava.moe";