diff --git a/hosts/cube/nginx.nix b/hosts/cube/nginx.nix
index 374bd3a..182686a 100644
--- a/hosts/cube/nginx.nix
+++ b/hosts/cube/nginx.nix
@@ -1,6 +1,8 @@
 { lib, ulib, pkgs, ... }: with ulib;
 
 serverSystemConfiguration {
+  networking.firewall.allowedTCPPorts = [ 80 443 ];
+
   services.nginx = enabled {
     recommendedGzipSettings  = true;
     recommendedOptimisation  = true;