diff --git a/system/nixos/aria2.nix b/system/nixos/aria2.nix
index 6afac2f..12804f1 100644
--- a/system/nixos/aria2.nix
+++ b/system/nixos/aria2.nix
@@ -64,4 +64,15 @@ in
       proxyWebsockets = true;
     };
   };
+
+  networking.firewall.interfaces =
+    let
+      ports = [ 6800 ];
+    in
+    {
+      "ens3".allowedTCPPorts = ports;
+      "ens3".allowedUDPPorts = ports;
+      "tailscale0".allowedTCPPorts = ports;
+      "tailscale0".allowedUDPPorts = ports;
+    };
 }