diff --git a/modules/consul.nix b/modules/consul.nix
index 422fe56..631166a 100644
--- a/modules/consul.nix
+++ b/modules/consul.nix
@@ -27,6 +27,11 @@ in {
     group = "consul";
   };
 
+  networking.firewall = {
+    allowedTCPPorts = [8300 8301 8302 8500 8600];
+    allowedUDPPorts = [8301 3802 8600];
+  };
+
   services.consul = {
     # package = myPkg;
     enable = true;