diff --git a/system/nixos/jellyfin.nix b/system/nixos/jellyfin.nix
index 0e25374..7d206d8 100644
--- a/system/nixos/jellyfin.nix
+++ b/system/nixos/jellyfin.nix
@@ -27,4 +27,13 @@
       proxyWebsockets = true;
     };
   };
+
+  networking.firewall.interfaces =
+    let
+      ports = [ 9920 ];
+    in
+    {
+      "ens3".allowedTCPPorts = ports;
+      "tailscale0".allowedTCPPorts = ports;
+    };
 }