diff --git a/hosts/mauville/raffauflabs.nix b/hosts/mauville/raffauflabs.nix
index f314ddef..a6dbfde4 100644
--- a/hosts/mauville/raffauflabs.nix
+++ b/hosts/mauville/raffauflabs.nix
@@ -28,10 +28,15 @@
     bitTorrentPort = 5143;
   };
 in {
+  networking = {
+    firewall.allowedTCPPorts = [80 443 3000];
+  };
+
   services = {
     audiobookshelf = {
       enable = true;
       host = "0.0.0.0";
+      openFirewall = true;
       port = audiobookshelf.port;
     };
 
@@ -85,7 +90,10 @@ in {
       };
     };
 
-    navidrome.enable = true;
+    navidrome = {
+      enable = true;
+      openFirewall = true;
+    };
 
     plex = {
       enable = true;