diff --git a/hosts/nixos/vaniville/configuration.nix b/hosts/nixos/vaniville/configuration.nix
index fc330fa..ed80337 100644
--- a/hosts/nixos/vaniville/configuration.nix
+++ b/hosts/nixos/vaniville/configuration.nix
@@ -112,9 +112,9 @@ in {
     # what actually does the forwarding
     firewall = {
       enable = true;
-      allowedTCPPorts = [22 80 443 25777 25579 25580 7567 21115 21116 21117 21118 21119];
+      allowedTCPPorts = [22 80 443 25777 25579 7567 21115 21116 21117 21118 21119];
       # tailscale will also need its UDP port open:
-      allowedUDPPorts = [config.services.tailscale.port 25777 21116];
+      allowedUDPPorts = [config.services.tailscale.port 25777 21116 25580];
       trustedInterfaces = ["tailscale0"];
       /*
       iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j DNAT --to-destination ${snowbelle_ip}:80        # http