diff --git a/nixos/hosts/osaka-linode-01/firewall.nix b/nixos/hosts/osaka-linode-01/firewall.nix
index 11069ef6..c400da1e 100644
--- a/nixos/hosts/osaka-linode-01/firewall.nix
+++ b/nixos/hosts/osaka-linode-01/firewall.nix
@@ -1,9 +1,6 @@
 { config, lib, pkgs, ... }: {
   networking = {
     firewall = {
-      allowedUDPPorts = [
-        3478  # Headscale DERP UDP
-      ];
       allowedTCPPorts = [
         80    # HTTP
         443   # HTTPS
@@ -11,6 +8,9 @@
         25565 # Minecraft
         1443  # Headscale DERP
       ];
+      allowedUDPPorts = [
+        3478  # Headscale DERP UDP
+      ];
     };
 
     nftables = {