diff --git a/ops/nixos/blade-tuvok/default.nix b/ops/nixos/blade-tuvok/default.nix
index 6ba473a955..308b8c2d92 100644
--- a/ops/nixos/blade-tuvok/default.nix
+++ b/ops/nixos/blade-tuvok/default.nix
@@ -26,6 +26,7 @@ in {
     }];
     defaultGateway = "195.74.55.20";
     defaultGateway6 = "2a03:ee40:8080:9:1::1";
+    firewall.allowedTCPPorts = [ 80 443 ];
   };
   my.ip.tailscale = "100.119.123.33";
   my.blade.bay = 6;