diff --git a/modules/server/nginx.nix b/modules/server/nginx.nix
index f2ef20fe..5e44d80e 100644
--- a/modules/server/nginx.nix
+++ b/modules/server/nginx.nix
@@ -7,6 +7,7 @@ in {
   options.void.server.nginx = { enable = mkEnableOption false; };
 
   config = mkIf cfg.enable {
+    networking.firewall.allowedTCPPorts = [ 80 443 ];
     security.acme = {
       acceptTerms = true;
       defaults.email = "Sayeko@proton.me";