diff --git a/modules/server/services/forgejo.nix b/modules/server/services/forgejo.nix
index 984ccebb..990e3656 100644
--- a/modules/server/services/forgejo.nix
+++ b/modules/server/services/forgejo.nix
@@ -5,6 +5,9 @@ in {
   options.void.server.services.forgejo = { enable = mkEnableOption false; };
 
   config = mkIf cfg.enable {
+
+    networking.firewall.allowedTCPPorts = [ 22 ];
+
     services.forgejo = {
       enable = true;
       database.type = "postgres";