diff --git a/nixos/configuration.nix b/nixos/configuration.nix
index 01546ca..cf42b43 100644
--- a/nixos/configuration.nix
+++ b/nixos/configuration.nix
@@ -137,4 +137,12 @@
   systemd.tmpfiles.rules = [
     "d /home/mudics/plg-mudics 0755 mudics - -"
   ];
+
+  networking.firewall = {
+    enable = true;
+    allowedTCPPorts = [
+      1323 # display
+      8080 # control
+    ];
+  };
 }