diff --git a/profiles/server/default.nix b/profiles/server/default.nix
index a4f34080..563d696d 100644
--- a/profiles/server/default.nix
+++ b/profiles/server/default.nix
@@ -1,6 +1,6 @@
 { config, ... }:
 {
   services.openssh.enable = true;
-  networking.firewall.allowedTCPPorts = [ 22 ];
+  networking.firewall.allowedTCPPorts = [ 80 433 22 ]; # ssh and website
   security.sudo.wheelNeedsPassword = false; # needed for deploy-rs
 }