diff --git a/git_system.nix b/git_system.nix
index 504b43e..bc57966 100644
--- a/git_system.nix
+++ b/git_system.nix
@@ -73,6 +73,13 @@ in
       };
     };
 
+    openssh = {
+      ports = [ 62 ];
+      settings = {
+          AllowUsers = [ "forgejo" ];
+      };
+    };
+
     renovate = {
       enable = true;
       schedule = "1 h";
diff --git a/shared/system.nix b/shared/system.nix
index effaf1a..da5ae16 100644
--- a/shared/system.nix
+++ b/shared/system.nix
@@ -23,6 +23,6 @@
 
   networking.firewall = {
     enable = true;
-    allowedTCPPorts = [ 62 80 443 ];
+    allowedTCPPorts = [ 80 443 ];
   };
 }