diff --git a/dot_config/flake/machines/saffron/configuration.nix b/dot_config/flake/machines/saffron/configuration.nix
index 518a42e..df6038d 100644
--- a/dot_config/flake/machines/saffron/configuration.nix
+++ b/dot_config/flake/machines/saffron/configuration.nix
@@ -31,6 +31,7 @@
   };
 
   networking.hostName = "saffron"; # Define your hostname.
+  networking.firewall.allowedTCPPorts = [ 443 ];
 
   # Caddy reverse proxy with DNS challenge
   services.caddy = {