diff --git a/hosts/dnsc-server/default.nix b/hosts/dnsc-server/default.nix
index 7771054..691f0cf 100644
--- a/hosts/dnsc-server/default.nix
+++ b/hosts/dnsc-server/default.nix
@@ -63,9 +63,11 @@
     enable = true;
     allowedTCPPorts = [
       9002 # Actual
+      9999 # Cockpit
     ];
     allowedUDPPorts = [
       9002 # Actual
+      9999 # Cockpit
     ];
   };
 
diff --git a/modules/cockpit/default.nix b/modules/cockpit/default.nix
index 5dfd7ce..ae68357 100644
--- a/modules/cockpit/default.nix
+++ b/modules/cockpit/default.nix
@@ -2,6 +2,8 @@
   services.cockpit = {
     enable = true;
     port = 9999;
+    openFirewall = true;
+    allowed-origins = [ "192.168.178.69:9999" ];
     settings = {
       WebService = {
         AllowUnencrypted = true;