diff --git a/modules/services/forgejo.nix b/modules/services/forgejo.nix
index 982bd1d..7b9430c 100644
--- a/modules/services/forgejo.nix
+++ b/modules/services/forgejo.nix
@@ -76,8 +76,10 @@ in
         ];
 
         boot.kernel.sysctl."net.ipv4.ip_unprivileged_port_start" = 22;
-        services.openssh.openFirewall = true;
-        networking.firewall.allowedTCPPorts = [ 80 ];
+        networking.firewall.allowedTCPPorts = [
+          22
+          80
+        ];
         services.openssh.ports = [ 2222 ];
 
         services.forgejo = {