diff --git a/dev_system.nix b/dev_system.nix
index 12452ff..11bedf1 100644
--- a/dev_system.nix
+++ b/dev_system.nix
@@ -23,6 +23,12 @@ in
     ./shared/ssh.nix
   ];
 
+  networking.firewall = {
+    allowedTCPPortRanges = [
+      { from = 8000; to = 8020 }
+    ];
+  };
+
   sops = {
     defaultSopsFile = ./secrets/ssh-key.yaml;
     age = {