diff --git a/hosts/dnsc-server/default.nix b/hosts/dnsc-server/default.nix
index f1ded22..7771054 100644
--- a/hosts/dnsc-server/default.nix
+++ b/hosts/dnsc-server/default.nix
@@ -63,11 +63,9 @@
     enable = true;
     allowedTCPPorts = [
       9002 # Actual
-      9090 # Cockpit
     ];
     allowedUDPPorts = [
       9002 # Actual
-      9090 # Cockpit
     ];
   };
 
diff --git a/modules/cockpit/default.nix b/modules/cockpit/default.nix
index 6cb5fc3..2e25196 100644
--- a/modules/cockpit/default.nix
+++ b/modules/cockpit/default.nix
@@ -1,6 +1,7 @@
 {
   services.cockpit = {
     enable = true;
+    openFirewall = true;
     settings = {
       WebService = {
         AllowUnencrypted = true;