diff --git a/server/configuration.nix b/server/configuration.nix
index 123d9c2..761a12d 100644
--- a/server/configuration.nix
+++ b/server/configuration.nix
@@ -124,7 +124,7 @@
     allowedUDPPorts = [ config.services.tailscale.port ];
 
     # allow you to SSH in over the public internet
-    allowedTCPPorts = [ 22 ];
+    allowedTCPPorts = [ 22 80 443 ];
   };