diff --git a/modules/nginx-acme/default.nix b/modules/nginx-acme/default.nix
index 40d9265..1a699f3 100644
--- a/modules/nginx-acme/default.nix
+++ b/modules/nginx-acme/default.nix
@@ -1,5 +1,8 @@
 { domain, ... }:
 {
+  networking.firewall.allowedTCPPorts = [
+    443
+  ];
   services.nginx = {
     enable = true;
     recommendedProxySettings = true;