diff --git a/system-config/services/containers/keycloak/default.nix b/system-config/services/containers/keycloak/default.nix
index 37e3436..01abfef 100644
--- a/system-config/services/containers/keycloak/default.nix
+++ b/system-config/services/containers/keycloak/default.nix
@@ -28,6 +28,8 @@
             };
 
             config = {
+                
+                networking.firewall.allowedTCPPorts = [ 80 ];
 
                 systemd.services.secrets_setup = {
                     wantedBy = [ "keycloak.service" ];