diff --git a/nixos/hosts/nuc-server/firewall.nix b/nixos/hosts/nuc-server/firewall.nix
index 6ef99846..683623f4 100644
--- a/nixos/hosts/nuc-server/firewall.nix
+++ b/nixos/hosts/nuc-server/firewall.nix
@@ -3,9 +3,11 @@
     firewall = {
       enable = true;
       allowedTCPPorts = [
-        53   # DNS
+        53    # DNS
         80    # HTTP
         443   # HTTPS
+        5696  # DSM-KMIP
+        5697  # DSM-KMIP Backup
       ];
       interfaces = {
         tailscale0= {