diff --git a/system/virtualization/docker/traefik/default.nix b/system/virtualization/docker/traefik/default.nix
index fb1d6b0..fe84713 100644
--- a/system/virtualization/docker/traefik/default.nix
+++ b/system/virtualization/docker/traefik/default.nix
@@ -6,6 +6,8 @@
     };
 
     config = lib.mkIf (config.sysconfig.docker.traefik.enable && config.sysconfig.docker.enable) {
+            
+        networking.firewall.allowedTCPPorts = [ 80 443 ];
 
         sops.secrets = {
             "traefik/cf_email" = {};