diff --git a/nixos/access/nginx.nix b/nixos/access/nginx.nix
new file mode 100644
index 00000000..4d6f4bf0
--- /dev/null
+++ b/nixos/access/nginx.nix
@@ -0,0 +1,6 @@
+_: {
+  networking.firewall.allowedTCPPorts = [
+    443
+    80
+  ];
+}
diff --git a/nixos/nginx.nix b/nixos/nginx.nix
index b2fae928..e90f5ddc 100644
--- a/nixos/nginx.nix
+++ b/nixos/nginx.nix
@@ -5,7 +5,7 @@
   ...
 }:
 with lib; {
-  networking.firewall.allowedTCPPorts = [
+  networking.firewall.interfaces.local.allowedTCPPorts = [
     443
     80
   ];
diff --git a/systems/hakurei/nixos.nix b/systems/hakurei/nixos.nix
index 44a25a86..d58b649b 100644
--- a/systems/hakurei/nixos.nix
+++ b/systems/hakurei/nixos.nix
@@ -22,6 +22,7 @@ in {
     nixos.ddclient
     nixos.acme
     nixos.nginx
+    nixos.access.nginx
     nixos.access.global
     nixos.access.gensokyo
     nixos.access.kanidm