diff --git a/systems/pi4/default.nix b/systems/pi4/default.nix
index e44c171..eca8b76 100644
--- a/systems/pi4/default.nix
+++ b/systems/pi4/default.nix
@@ -33,6 +33,12 @@
 
   powerManagement.cpuFreqGovernor = "ondemand";
 
+  networking.firewall = {
+    enable = true;
+    allowedTCPPorts = [ 80 443 ];
+    allowedUDPPorts = [ 80 443 ];
+  };
+
   services.nginx = {
     enable = true;
   };