diff --git a/systems/zap/default.nix b/systems/zap/default.nix
index 7f8f056..b494121 100644
--- a/systems/zap/default.nix
+++ b/systems/zap/default.nix
@@ -28,6 +28,13 @@
 
   services.cloud-init.enable = true;
   services.cloud-init.network.enable = true;
+  
+  networking.firewall = {
+  enable = true;
+  allowedTCPPorts = [ 3000 ];
+  allowedUDPPorts = [ 3000 ];
+};
+
 
 #   networking = {
 #     wireless.enable = lib.mkForce false;