diff --git a/modules/nixos/proxy.nix b/modules/nixos/proxy.nix
index de90a2c..46cc37b 100644
--- a/modules/nixos/proxy.nix
+++ b/modules/nixos/proxy.nix
@@ -92,4 +92,9 @@ with lib;
 
     virtualHosts = mapAttrs makeHost cfg;
   };
+
+  config.networking.firewall.allowedTCPPorts = mkIf ((attrValues cfg) != [ ]) [
+    80
+    443
+  ];
 }