diff --git a/hosts/hedgedoc.nix b/hosts/hedgedoc.nix
index 8d4bb03..21bc5ea 100644
--- a/hosts/hedgedoc.nix
+++ b/hosts/hedgedoc.nix
@@ -76,4 +76,6 @@ in
             };
         };
     };
+
+    networking.firewall.allowedTCPPorts = [ 80 443 ];
 }