diff --git a/hosts/library/default.nix b/hosts/library/default.nix
index 736c441..335abb9 100644
--- a/hosts/library/default.nix
+++ b/hosts/library/default.nix
@@ -13,6 +13,12 @@ with lib.my;
   networking.hostName = "library";
   networking.domain = "mesh.vimium.net";
   networking.hostId = "d24ae953";
+  networking.firewall = {
+    enable = true;
+    allowedTCPPorts = [
+      22  # SSH
+    ];
+  };
 
   networking.networkmanager.enable = true;