diff --git a/machines/krz01/_configuration.nix b/machines/krz01/_configuration.nix
index 8d34622..ce003b5 100644
--- a/machines/krz01/_configuration.nix
+++ b/machines/krz01/_configuration.nix
@@ -82,6 +82,11 @@ lib.extra.mkConfig {
         };
       };
     };
+
+    networking.firewall.allowedTCPPorts = [
+      80
+      443
+    ];
   };
 
   root = ./.;