diff --git a/hosts/glotzbert/default.nix b/hosts/glotzbert/default.nix
index bd5986ca..70d49697 100644
--- a/hosts/glotzbert/default.nix
+++ b/hosts/glotzbert/default.nix
@@ -26,6 +26,11 @@
 
   networking = {
     domain = "hq.c3d2.de";
+    firewall = {
+      allowedTCPPorts = [
+        5900 # vnc
+      ];
+    };
     hostId = "42424242";
     hostName = "glotzbert";
     interfaces.enp0s25.useDHCP = true;
@@ -60,9 +65,6 @@
     };
   };
 
-  # TODO: enable
-  networking.firewall.enable = false;
-
   sound.enable = true;
 
   hardware = {