diff --git a/machines/dev/fedi203/woodpecker.nix b/machines/dev/fedi203/woodpecker.nix
index e9ee0e49..cfe55c50 100644
--- a/machines/dev/fedi203/woodpecker.nix
+++ b/machines/dev/fedi203/woodpecker.nix
@@ -203,6 +203,7 @@
 
   networking = {
     firewall = {
+      enable = lib.mkForce true;
       allowedTCPPorts = [
         22
         80