diff --git a/shared/system.nix b/shared/system.nix
index d1df77c..da5ae16 100644
--- a/shared/system.nix
+++ b/shared/system.nix
@@ -20,5 +20,9 @@
   environment.systemPackages = with pkgs; [
     git
   ];
-}
 
+  networking.firewall = {
+    enable = true;
+    allowedTCPPorts = [ 80 443 ];
+  };
+}