diff --git a/nixos/hosts/quitman-rpi4/default.nix b/nixos/hosts/quitman-rpi4/default.nix
index ca62ec91..ccb17345 100644
--- a/nixos/hosts/quitman-rpi4/default.nix
+++ b/nixos/hosts/quitman-rpi4/default.nix
@@ -55,4 +55,5 @@
     "--advertise-routes 192.168.1.0/24,192.168.68.0/24"
   ];
   boot.kernel.sysctl = { "net.ipv4.ip_forward" = true; };
+  networking.firewall.allowedTCPPorts = [ 22 ];
 }