diff --git a/modules/nixos/services/home-assistant/default.nix b/modules/nixos/services/home-assistant/default.nix
index 0a92816..7a830df 100644
--- a/modules/nixos/services/home-assistant/default.nix
+++ b/modules/nixos/services/home-assistant/default.nix
@@ -134,9 +134,15 @@ in
     };
 
     ### Firewall configuration
-    networking.firewall.allowedUDPPorts = [
-      5353 # HA does its own mDNS discovery on the host network.
-      5540 # Matter operational discovery and commissioning.
-    ];
+    networking.firewall = {
+      allowedUDPPorts = [
+        5353 # HA does its own mDNS discovery on the host network.
+        5540 # Matter operational discovery and commissioning.
+      ];
+
+      allowedTCPPorts = [
+        8123 # HA default TCP port
+      ];
+    };
   };
 }