diff --git a/system-config/services/containers/code-server/default.nix b/system-config/services/containers/code-server/default.nix
index 346eb04..cbcc9fa 100644
--- a/system-config/services/containers/code-server/default.nix
+++ b/system-config/services/containers/code-server/default.nix
@@ -30,6 +30,8 @@
                     auth = "password";
                 };
 
+                networking.firewall.allowedTCPPorts = [ 4444 ];
+
                 system.stateVersion = "25.05";
             };
         };