diff --git a/modules/nixos/base/networking.nix b/modules/nixos/base/networking.nix
index 33830355..bdc4ce49 100644
--- a/modules/nixos/base/networking.nix
+++ b/modules/nixos/base/networking.nix
@@ -1,4 +1,22 @@
 {
+  networking.firewall.allowedTCPPorts = [
+    # localsend
+    53317
+
+    # tcp ports for testing & sharing
+    63080
+    63081
+    63082
+    63083
+    63084
+    63085
+    63086
+    63087
+    63088
+    63089
+  ];
+  # networking.firewall.allowedUDPPorts = [ ... ];
+
   # Network discovery, mDNS
   # With this enabled, you can access your machine at <hostname>.local
   # it's more convenient than using the IP address.
diff --git a/modules/nixos/base/ssh.nix b/modules/nixos/base/ssh.nix
index 0c2ccb9c..5582fa5d 100644
--- a/modules/nixos/base/ssh.nix
+++ b/modules/nixos/base/ssh.nix
@@ -1,6 +1,4 @@
 {lib, ...}: {
-  # networking.firewall.allowedTCPPorts = [ ... ];
-  # networking.firewall.allowedUDPPorts = [ ... ];
   # Or disable the firewall altogether.
   networking.firewall.enable = lib.mkDefault false;
   # Enable the OpenSSH daemon.