diff --git a/modules/user/general.nix b/modules/user/general.nix
index 153038b..da11ede 100644
--- a/modules/user/general.nix
+++ b/modules/user/general.nix
@@ -49,6 +49,19 @@
     };
   };
 
+  networking.firewall = {
+    allowedTCPPorts = [
+      # syncthing TCP
+      22000
+    ];
+    allowedUDPPorts = [
+      # syncthing QUIC
+      22000
+      # syncthing discovery
+      21027
+    ];
+  };
+
   home-manager.users.${config.main-user} = homeInputs: let
     homeConfig = homeInputs.config;
   in {