diff --git a/hosts/kittykat/traefik.nix b/hosts/kittykat/traefik.nix
index bf8a7fe..e6abfb4 100644
--- a/hosts/kittykat/traefik.nix
+++ b/hosts/kittykat/traefik.nix
@@ -1,4 +1,9 @@
 {config, ...}: {
+  networking.firewall = {
+    enable = true;
+    allowedTCPPorts = [80 443];
+  };
+
   services.traefik = {
     enable = true;