diff --git a/machines/dev/fedi203/woodpecker.nix b/machines/dev/fedi203/woodpecker.nix
index 96fe0517..77d00cfa 100644
--- a/machines/dev/fedi203/woodpecker.nix
+++ b/machines/dev/fedi203/woodpecker.nix
@@ -204,6 +204,7 @@
   networking = {
     nftables.enable = lib.mkForce false;
     firewall = {
+      enable = lib.mkForce true;
       allowedTCPPorts = [
         22
         80