diff --git a/nixos/modules/gnunet/default.nix b/nixos/modules/gnunet/default.nix
index 8a1cd3c..5e5069b 100644
--- a/nixos/modules/gnunet/default.nix
+++ b/nixos/modules/gnunet/default.nix
@@ -92,6 +92,9 @@ in
     # so install them globally.
     environment.systemPackages = [ cfg.package ];
 
+    networking.firewall.allowedTCPPorts = [ 2086 ];
+    networking.firewall.allowedUDPPorts = [ 2086 ];
+
     security.wrappers = {
       gnunet-helper-vpn = {
         source = "${cfg.package}/lib/gnunet/libexec/gnunet-helper-vpn";