diff --git a/hosts/neodymium/configuration.nix b/hosts/neodymium/configuration.nix
index b83b673..eff805e 100644
--- a/hosts/neodymium/configuration.nix
+++ b/hosts/neodymium/configuration.nix
@@ -15,6 +15,9 @@ in {
   # networking
   networking.hostName = "neodymium";
   networking.networkmanager.enable = true;
+  networking.firewall.enable = true;
+  networking.firewall.allowedTCPPorts = [];
+  networking.firewall.allowedUDPPorts = [];
 
   # use systemd-boot EFI boot loader
   boot.loader.systemd-boot.enable = true;