diff --git a/nix/nixos-module/server/network.nix b/nix/nixos-module/server/network.nix
index 71cdff4..f056670 100644
--- a/nix/nixos-module/server/network.nix
+++ b/nix/nixos-module/server/network.nix
@@ -25,6 +25,11 @@ let
 
 in
 {
+  networking.firewall = {
+    enable = true;
+    allowedTCPPorts = [ 22 ];
+  };
+
   systemd.network = {
     enable = true;