diff --git a/server-modules/adguardhome.nix b/server-modules/adguardhome.nix
index 358ed8a..d64df92 100644
--- a/server-modules/adguardhome.nix
+++ b/server-modules/adguardhome.nix
@@ -6,5 +6,10 @@
     port = 3000;
   };
 
+  networking.firewall = {
+    allowedTCPPorts = [53];
+    allowedUDPPorts = [53];
+  };
+
   services.cloudflared.tunnels."f7c8f777-a36c-4b9a-b6e3-6a112bd43e73".ingress."adguard.hadi.diy" = "http://localhost:${toString config.services.adguardhome.port}";
 }