diff --git a/flake.nix b/flake.nix
index 3858ca7..ad7519b 100644
--- a/flake.nix
+++ b/flake.nix
@@ -39,7 +39,10 @@
             #   # 28332 
             #   # 28333 
             #   ];
-
+            networking.firewall.allowedTCPPorts = [
+              config.services.btcpayserver.port
+              config.services.bitcoind.port
+            ];
             systemd.suppressedSystemUnits = [
               "dev-mqueue.mount"
               "sys-kernel-debug.mount"