diff --git a/base/firewall.nix b/base/firewall.nix
index 3b75fdb..aecd756 100644
--- a/base/firewall.nix
+++ b/base/firewall.nix
@@ -1,3 +1,5 @@
 {
+  networking.firewall.allowedUDPPorts = [ 22000 21027 ];
+  networking.firewall.allowedTCPPorts = [ 22000 ];
   services.syncthing.openDefaultPorts = true;
 }