diff --git a/default.nix b/default.nix
index 232b3f3a..7a3e7baf 100644
--- a/default.nix
+++ b/default.nix
@@ -78,6 +78,8 @@
     home.file."bin" = { source = ./bin; recursive = true; };
   };
 
+  networking.firewall.enable = true;
+
   # This value determines the NixOS release with which your system is to be
   # compatible, in order to avoid breaking some software such as database
   # servers. You should change this only after NixOS release notes say you