diff --git a/modules/services/authentik.nix b/modules/services/authentik.nix
index 793dc1e..7f62dd0 100644
--- a/modules/services/authentik.nix
+++ b/modules/services/authentik.nix
@@ -101,6 +101,8 @@ in
         };
       };
 
+      networking.firewall.allowedTCPPorts = [ 9000 ];
+
     })
 
     (lib.mkIf cfg.proxy.enable {