diff --git a/cluster/prod/site/orion.nix b/cluster/prod/site/orion.nix
index 08ef51a..fb4ba22 100644
--- a/cluster/prod/site/orion.nix
+++ b/cluster/prod/site/orion.nix
@@ -10,5 +10,5 @@
   deuxfleurs.cname_target = "orion.site.deuxfleurs.fr.";
   deuxfleurs.public_ipv4 = "82.66.80.201";
 
-  networking.firewall.allowedTCPPorts = [ ];
+  networking.firewall.allowedTCPPorts = [ 80 443 ];
 }