diff --git a/hosts/cirrus/wireguard-server.nix b/hosts/cirrus/wireguard-server.nix
index 7920e9f..886b045 100644
--- a/hosts/cirrus/wireguard-server.nix
+++ b/hosts/cirrus/wireguard-server.nix
@@ -1,5 +1,6 @@
 { config, ... }:
 {
+  networking.firewall.allowedUDPPorts = [ 51820 ];
   networking.wireguard.enable = true;
   systemd.network = {
     netdevs."oxalab" = {