diff --git a/hosts/sombrero/configuration.nix b/hosts/sombrero/configuration.nix
index 14fb3de..6d21a37 100644
--- a/hosts/sombrero/configuration.nix
+++ b/hosts/sombrero/configuration.nix
@@ -67,7 +67,11 @@
     };
 
     firewall = {
-      allowedTCPPorts = [ 1122 32400 8384 ];
+      allowedTCPPorts = [
+        1122  # ssh
+        32400 # plex
+        8384  # syncthing
+      ];
     };
   };