diff --git a/machines/dev/forgejo-ci/woodpecker.nix b/machines/dev/forgejo-ci/woodpecker.nix
index 2f7e7982..64fd1120 100644
--- a/machines/dev/forgejo-ci/woodpecker.nix
+++ b/machines/dev/forgejo-ci/woodpecker.nix
@@ -211,6 +211,8 @@
         22
         80
         443
+        8000
+        9000
       ];
       # needed for podman to be able to talk over dns
       interfaces."podman+" = {