diff --git a/system/virtualization/containers/gitea/default.nix b/system/virtualization/containers/gitea/default.nix
index ffd9d09..baf70bd 100644
--- a/system/virtualization/containers/gitea/default.nix
+++ b/system/virtualization/containers/gitea/default.nix
@@ -30,7 +30,7 @@
 
             forwardPorts = [
                 {
-                    containerPort = 22;
+                    containerPort = 2222;
                     hostPort = 2222;
                 }
             ];
@@ -101,14 +101,16 @@
                 };
                 services.openssh = {
                     enable = true;
+                    openFirewall = true;
                     settings = {
                         PermitRootLogin = lib.mkForce "no";
                         PasswordAuthentication = false;
                         KbdInteractiveAuthentication = false;
                     };
+                    ports = [ 2222 ];
                 };
 
-                networking.firewall.allowedTCPPorts = [ 22 3000 ];
+                networking.firewall.allowedTCPPorts = [ 3000 ];
 
                 system.stateVersion = "24.11";
             };