diff --git a/machines/storage/s0/home-automation.nix b/machines/storage/s0/home-automation.nix
index 033ac64..92c85df 100644
--- a/machines/storage/s0/home-automation.nix
+++ b/machines/storage/s0/home-automation.nix
@@ -14,6 +14,9 @@
       }
     ];
   };
+  networking.firewall.allowedTCPPorts = [
+    1883 # mqtt
+  ];
 
   services.zigbee2mqtt = {
     enable = true;