diff --git a/hosts/manatee/modules/nginx/default.nix b/hosts/manatee/modules/nginx/default.nix
index 0cd5030..d4e5e0c 100644
--- a/hosts/manatee/modules/nginx/default.nix
+++ b/hosts/manatee/modules/nginx/default.nix
@@ -18,5 +18,11 @@ in
         recommendedTlsSettings = true;
       };
     };
+
+    networking = {
+      firewall = {
+        allowedTCPPorts = [ 443 ];
+      };
+    };
   };
 }