diff --git a/ipfs.nix b/ipfs.nix
index 30ef9d4..64a49b1 100644
--- a/ipfs.nix
+++ b/ipfs.nix
@@ -1,6 +1,9 @@
 { config, pkgs, ... }:
 
 {
+  networking.firewall.allowedTCPPorts = [
+    4001 # This is IPFS swarm port
+  ];
   services.ipfs = {
     enable = true;
     enableGC = true;