diff --git a/hosts/server/nextcloud.nix b/hosts/server/nextcloud.nix
index 01290be..9a4a12a 100644
--- a/hosts/server/nextcloud.nix
+++ b/hosts/server/nextcloud.nix
@@ -9,4 +9,6 @@
     config.adminpassFile = "/etc/nextcloudpwd";
     settings = { overwritehost = "localhost:8080"; };
   };
+
+  networking.firewall.allowedTCPPorts = [ 8080 ];
 }