diff --git a/nixos/hosts/nixos-rpi4-01/default.nix b/nixos/hosts/nixos-rpi4-01/default.nix
index a8d1dbeb..f047f5fb 100644
--- a/nixos/hosts/nixos-rpi4-01/default.nix
+++ b/nixos/hosts/nixos-rpi4-01/default.nix
@@ -40,4 +40,5 @@
   
   # Generic Tailscale configs are in /nixos/common/services/tailscale.nix
   services.tailscale.authKeyFile = "/run/secrets/nixos-rpi4-01_tailscale_key";
+  services.openssh.openFirewall = true;
 }
\ No newline at end of file