diff --git a/configuration.nix b/configuration.nix
index 36cfb60..9d61550 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -26,13 +26,17 @@
     hostId = "758371f0";
     firewall = {
       enable = true;
-      allowedTCPPorts = [ 22 80 443 ];
+      allowedTCPPorts = [
+        22  # ssh
+        655 # tinc
+      ];
+      allowedUDPPorts = [
+        655 # tinc
+      ];
     };
   };
 
-  security = {
-    hideProcessInformation = true;
-  };
+  security.hideProcessInformation = true;
 
   environment.systemPackages = with pkgs;
   [