diff --git a/modules/flake-module.nix b/modules/flake-module.nix
index c16d15d..6c3a5f5 100644
--- a/modules/flake-module.nix
+++ b/modules/flake-module.nix
@@ -3,6 +3,8 @@
     server.imports = [
       inputs.srvos.nixosModules.server
       inputs.srvos.nixosModules.mixins-telegraf
+      # FIXME: switch to VPN later
+      { networking.firewall.allowedTCPPorts = [ 9273 ]; }
       inputs.sops-nix.nixosModules.default
     ];