diff --git a/hosts/sakura/services/forgejo.nix b/hosts/sakura/services/forgejo.nix
index a1cbe22..804119a 100644
--- a/hosts/sakura/services/forgejo.nix
+++ b/hosts/sakura/services/forgejo.nix
@@ -4,6 +4,7 @@
   config,
   ...
 }: {
+  networking.firewall.allowedTCPPorts = [2222];
   services.forgejo = {
     enable = true;
     stateDir = "/var/lib/forgejo";