diff --git a/microvms/music/navidrome.nix b/microvms/music/navidrome.nix
index a9c52df..9c0a389 100644
--- a/microvms/music/navidrome.nix
+++ b/microvms/music/navidrome.nix
@@ -1,10 +1,12 @@
 { config, ... }: {
+  networking.firewall.interfaces.oxaproxy.allowedTCPPorts = [ 4533 ];
   services.navidrome = {
     enable = true;
     settings = {
       BaseUrl = "/";
       EnableExternalServices = false;
       MusicFolder = "/var/lib/navidrome/library";
+      Port = 4533;
       ScanSchedule = "@every 17min";
       TranscondigCacheSize = "5GiB";
     };