diff --git a/krebs/1systems/puyak/config.nix b/krebs/1systems/puyak/config.nix
index 083a25a89..978bd18e0 100644
--- a/krebs/1systems/puyak/config.nix
+++ b/krebs/1systems/puyak/config.nix
@@ -71,4 +71,5 @@
     isNormalUser = true;
     shell = "/run/current-system/sw/bin/zsh";
   };
+  networking.firewall.allowedTCPPorts = [ 5901 ];
 }