diff --git a/modules/nixos/_private/suites/server.nix b/modules/nixos/_private/suites/server.nix
index 37fcd569..8f3f91fd 100644
--- a/modules/nixos/_private/suites/server.nix
+++ b/modules/nixos/_private/suites/server.nix
@@ -39,6 +39,8 @@ in
       services.openssh = {
         enable = lib.mkDefault true;
 
+        openFirewall = true;
+
         settings = {
           # Making it verbose for services such as fail2ban.
           LogLevel = "VERBOSE";