diff --git a/matrix-module.nix b/matrix-module.nix
index 4508a7d..24e0442 100644
--- a/matrix-module.nix
+++ b/matrix-module.nix
@@ -105,6 +105,8 @@ in {
         [ cfg.state-directory ];
     };
 
+    networking.firewall.allowedTCPPorts = [ 8008 8448 ];
+
     services = {
       matrix-synapse = {
         enable = true;