diff --git a/machines/109-199-104-83/configuration.nix b/machines/109-199-104-83/configuration.nix
index f8484f5..7e170ee 100644
--- a/machines/109-199-104-83/configuration.nix
+++ b/machines/109-199-104-83/configuration.nix
@@ -100,6 +100,11 @@
     usePredictableInterfaceNames = true;
     hostName = machine.hostname;
     domain = "galaxious.de";
+    firewall = {
+      enable = true;
+      allowedTCPPorts = [80 443];
+      allowedUDPPorts = [80 443];
+    };
   };
   systemd.network = {
     enable = true;