diff --git a/configuration.nix b/configuration.nix
index 1ebeea7d..0ddd9d95 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -25,7 +25,11 @@
   ];
 
   # TODO colin: re-enable the firewall
-  networking.firewall.enable = false;
+  # networking.firewall.enable = false;
+  networking.firewall.allowedTCPPorts = [ 25 80 443 ];
+  # DLNA ports: https://jellyfin.org/docs/general/networking/index.html
+  networking.firewall.allowedUDPPorts = [ 1900 7359 ];
+
 
   # XXX colin: UNMODIFIED DEFAULTS BELOW