diff --git a/config/services/glauth/default.nix b/config/services/glauth/default.nix
index 183ec628..803a979e 100644
--- a/config/services/glauth/default.nix
+++ b/config/services/glauth/default.nix
@@ -1,4 +1,6 @@
 { config, tf, lib, ... }: with lib; {
+  network.firewall.public.tcp.ports = singleton 3984;
+
   services.glauth = {
     enable = true;
     configFile = config.secrets.files.glauth-config-file.path;