diff --git a/nebula.nix b/nebula.nix
index fc9b27c..06d584e 100644
--- a/nebula.nix
+++ b/nebula.nix
@@ -8,6 +8,17 @@
     cert = "/var/lib/nebula/node.crt";
     key = "/var/lib/nebula/node.key";
     ca = "/var/lib/nebula/ca.crt";
+
+    firewall.inbound = [{
+      host = "any";
+      port = "any";
+      proto = "any";
+    }];
+    firewall.outbound = [{
+      host = "any";
+      port = "any";
+      proto = "any";
+    }];
   };
 
   networking.firewall.allowedTCPPorts = [ 4242 ];