diff --git a/lib/fudo/jabber.nix b/lib/fudo/jabber.nix
index 11cf734..34b10d4 100644
--- a/lib/fudo/jabber.nix
+++ b/lib/fudo/jabber.nix
@@ -196,6 +196,10 @@ in {
       };
     };
 
+    networking.firewall = {
+      allowedTCPPorts = [ 5222 5223 5269 8010 ];
+    };
+
     fudo = {
       acme.host-domains.${hostname} = mapAttrs (site: siteCfg:
         mkIf siteCfg.enableACME {