diff --git a/hosts/caramel/networking.nix b/hosts/caramel/networking.nix
index bd8c65c..93059b2 100644
--- a/hosts/caramel/networking.nix
+++ b/hosts/caramel/networking.nix
@@ -1,6 +1,8 @@
 { config, ... }: {
   environment.etc."wpa_supplicant.conf".source = config.age.secrets.wpa_conf.path;
   networking = {
+    firewall.allowedTCPPorts = [ 80 443 ];
+
     wireless = {
       enable = true;
       interfaces = [ "wlan0" ];