diff --git a/modules/server/soju.nix b/modules/server/soju.nix
index cd31aa6..0d7f161 100644
--- a/modules/server/soju.nix
+++ b/modules/server/soju.nix
@@ -5,6 +5,8 @@
       "irc+insecure://0.0.0.0:6667"
     ];
 
+    networking.firewall.allowedTCPPorts = [6667];
+
     # we may not use this in the configuration, however
     # we still declare this for the sysadmin to then go and
     # create the user using: