diff --git a/ops/nixos/kusakabe/default.nix b/ops/nixos/kusakabe/default.nix
index 13564a3544..66554104a1 100644
--- a/ops/nixos/kusakabe/default.nix
+++ b/ops/nixos/kusakabe/default.nix
@@ -89,9 +89,6 @@ in {
 
         # NFS
         111 2049
-
-        # IPFS
-        4001
       ];
       interfaces.br-ext.allowedTCPPorts = [
         # NFS
@@ -108,7 +105,8 @@ in {
 
         # TURN
         3478
-
+      ];
+      allowedUDPPorts = [
         # IPFS
         4001
       ];
@@ -116,6 +114,9 @@ in {
         80 443 6443
         5222 5223 5269 5280 5281
         3478
+
+        # IPFS
+        4001
       ];
     };
   };