diff --git a/hosts/rpi4/services.nix b/hosts/rpi4/services.nix
index 3071c12..a9d29d3 100644
--- a/hosts/rpi4/services.nix
+++ b/hosts/rpi4/services.nix
@@ -40,7 +40,11 @@
 
     users.users.nginx.extraGroups = [ "acme" ];
 
-    networking.firewall.allowedTCPPorts = [ 80 443 ];
+    networking.firewall.allowedTCPPorts = [
+      80 443
+      # this is needed for node to work for some reason
+      8123
+    ];
 
     services.nginx = {
       enable = true;