diff --git a/ops/nixos/totoro/default.nix b/ops/nixos/totoro/default.nix
index 7ca1d2730e..d83346fcda 100644
--- a/ops/nixos/totoro/default.nix
+++ b/ops/nixos/totoro/default.nix
@@ -78,6 +78,12 @@ in {
       ipv4.addresses = [{ address = "10.0.0.2"; prefixLength = 24; }];
     };
     bridges.br-int.interfaces = [];
+    firewall.allowedTCPPorts = [
+      4001  # ipfs
+    ];
+    firewall.allowedUDPPorts = [
+      4001  # ipfs
+    ];
   };
   my.ip.tailscale = "100.122.86.11";