diff --git a/systems/x86_64-linux/halo/default.nix b/systems/x86_64-linux/halo/default.nix
index 1a1115e..ac975dc 100644
--- a/systems/x86_64-linux/halo/default.nix
+++ b/systems/x86_64-linux/halo/default.nix
@@ -13,6 +13,10 @@ with lib.metacfg;
   boot.lanzaboote.pkiBundle = "/var/lib/sbctl"; 
   boot.kernelPackages = lib.mkOverride 0 pkgs.linuxPackages_latest;
 
+  networking.firewall.allowedTCPPorts = [
+    1234
+  ];
+
   systemd.tmpfiles.rules = 
   let
     rocmEnv = pkgs.symlinkJoin {