diff --git a/config/services/caddy/default.nix b/config/services/caddy/default.nix
index dcc78c31..7c5c2646 100644
--- a/config/services/caddy/default.nix
+++ b/config/services/caddy/default.nix
@@ -26,4 +26,6 @@ _: {
   systemd.tmpfiles.rules = [
     "d '/var/lib/caddy' 0750 caddy acme - -"
   ];
+  networking.firewall.allowedTCPPorts = [80 443];
+  networking.firewall.allowedUDPPorts = [443];
 }