diff --git a/modules/server/nginx.nix b/modules/server/nginx.nix
index 0aeb139..b7294b1 100644
--- a/modules/server/nginx.nix
+++ b/modules/server/nginx.nix
@@ -6,6 +6,7 @@ with lib;{
     in
     mkIf cfg.enable {
       services.nginx.enable = true;
+      networking.firewall.allowedTCPPorts = [ 80 443 ];
       services.nginx.virtualHosts."localhost" = {
         addSSL = false;
         enableACME = false;