diff --git a/modules/nixos/services/nginx.nix b/modules/nixos/services/nginx.nix
index fcac993..f3f652f 100644
--- a/modules/nixos/services/nginx.nix
+++ b/modules/nixos/services/nginx.nix
@@ -10,6 +10,8 @@
         enable = true;
       };
 
+      networking.firewall.allowedTCPPorts = [ 80 443 ];
+
       security.acme = {
         acceptTerms = true;
         defaults.email = "osbm@osbm.dev";