diff --git a/hosts/rpi4/configuration.nix b/hosts/rpi4/configuration.nix
index a76ac15..8726327 100644
--- a/hosts/rpi4/configuration.nix
+++ b/hosts/rpi4/configuration.nix
@@ -42,6 +42,12 @@
     autostart = true;
   };
 
+  networking.firewall.trustedInterfaces = [
+    "wg0"
+    "tailscale0"
+  ];
+  networking.firewall.allowedUDPPorts = [ 51820 ];
+
   services.openssh = {
     enable = true;
     openFirewall = true;