diff --git a/hosts/Alaska/modules/headscale.nix b/hosts/Alaska/modules/headscale.nix
index 7507c24..35a93ab 100644
--- a/hosts/Alaska/modules/headscale.nix
+++ b/hosts/Alaska/modules/headscale.nix
@@ -7,6 +7,10 @@ let
 in {
   boot.kernel.sysctl."net.ipv4.ip_forward" = 1;
   boot.kernel.sysctl."net.ipv6.conf.all.forwarding" = 1;
+
+  # open for DERP
+  networking.firewall.allowedUDPPorts = [ 3478 ];
+
   # https://carjorvaz.com/posts/setting-up-headscale-on-nixos/
   services.headscale = {
     enable = true;