diff --git a/modules/matrix/default.nix b/modules/matrix/default.nix
index 6e214ac..cef43d2 100644
--- a/modules/matrix/default.nix
+++ b/modules/matrix/default.nix
@@ -23,4 +23,6 @@ in mkIf conf.matrix.enable {
       allow_registration = false;
     };
   };
+
+  networking.firewall.allowedTCPPorts = [ 443 8448 ];
 }