diff --git a/hosts/radiobert/default.nix b/hosts/radiobert/default.nix
index 5c8ad6cb..76f2cae8 100644
--- a/hosts/radiobert/default.nix
+++ b/hosts/radiobert/default.nix
@@ -76,11 +76,35 @@
       prefixLength = 26;
     }];
     defaultGateway = "172.20.73.1";
-    firewall.allowedTCPPorts = [ 22 80 443 ];
+    firewall.allowedTCPPorts = [
+      # SSH
+      22
+      # Web
+      80 443
+      # SoapySDRServer
+      55132
+    ];
+    firewall.enable = false;
     nameservers = [ "172.20.73.8" "9.9.9.9" ];
   };
 
-  services.openwebrx.enable = true;
+  # services.openwebrx.enable = true;
+
+  users.users.soapysdr = {
+    isSystemUser = true;
+    group = "soapysdr";
+  };
+  users.groups.soapysdr = {};
+  systemd.services.soapysdr-server = {
+    wantedBy = [ "multi-user.target" ];
+    serviceConfig = {
+      ExecStart = "${pkgs.soapysdr-with-plugins}/bin/SoapySDRServer --bind";
+      User = "soapysdr";
+      Group = "soapysdr";
+      ProtectSystem = "full";
+      ProtectHome = true;
+    };
+  };
 
   services.collectd.plugins = {
     curl_json = ''