diff --git a/ops/nixos/clouvider-fra01/default.nix b/ops/nixos/clouvider-fra01/default.nix
index 36a20426f1..54a50e18f3 100644
--- a/ops/nixos/clouvider-fra01/default.nix
+++ b/ops/nixos/clouvider-fra01/default.nix
@@ -98,6 +98,9 @@ in {
       ipv6.addresses = [{ address = "2a0f:93c0:0:22::2"; prefixLength = 126; }];
     };
     firewall.allowPing = true;
+    firewall.allowedTCPPorts = [
+      4001  # ipfs
+    ];
   };
   my.ip.tailscale = "100.75.142.119";
 
@@ -174,5 +177,14 @@ in {
     virtualHosts = vhosts;
   };
 
+  services.ipfs = {
+    enable = true;
+    extraConfig = {
+      Discovery.MDNS.Enabled = false;
+      Swarm.DisableNatPortMap = true;
+    };
+    dataDir = "/store/ipfs";
+  };
+
   system.stateVersion = "20.09";
 }