diff --git a/nixos/plex.nix b/nixos/plex.nix
index fa607541..3163b67f 100644
--- a/nixos/plex.nix
+++ b/nixos/plex.nix
@@ -15,7 +15,10 @@
   # Tautulli and Ombi will also be reverse proxied, presumably
 
   networking.firewall = {
-    allowedTCPPorts = [32400 8324 32469 8181 5000];
+    interfaces.local.allowedTCPPorts = [
+      32400
+    ];
+    allowedTCPPorts = [8324 32469 8181 5000];
     allowedUDPPorts = [1900 5353 32410 32412 32413 32414];
   };
 }