diff --git a/appserver/incus.nix b/appserver/incus.nix
index 22aa502..a95e662 100644
--- a/appserver/incus.nix
+++ b/appserver/incus.nix
@@ -9,4 +9,5 @@
     incus
     lxc
   ];
+  networking.firewall.allowedTCPPorts = [ 8443 ];
 }