diff --git a/config/services/nginx.nix b/config/services/nginx.nix
index 49fad650..3a040602 100644
--- a/config/services/nginx.nix
+++ b/config/services/nginx.nix
@@ -24,4 +24,6 @@
     resolver.addresses = [ "127.0.0.1" "[::1]" ];
     sslProtocols = "TLSv1.3";
   };
+  networking.firewall.allowedTCPPorts = [ 80 443 ];
+  networking.firewall.allowedUDPPorts = [ 443 ];
 }