diff --git a/hosts/pochita/configuration.nix b/hosts/pochita/configuration.nix
index cbbf7ff..0a5881b 100644
--- a/hosts/pochita/configuration.nix
+++ b/hosts/pochita/configuration.nix
@@ -54,6 +54,9 @@
     '';
   };
 
+  # now, for the ports of the caddy server
+  networking.firewall.allowedTCPPorts = [ 80 443 3000 ];
+
   networking.hostName = "pochita";
   # log of shame: osbm blamed nix when he wrote "hostname" instead of "hostName"