diff --git a/nix-config/system/syncthing.nix b/nix-config/system/syncthing.nix
index 787706887..db62bf236 100644
--- a/nix-config/system/syncthing.nix
+++ b/nix-config/system/syncthing.nix
@@ -10,4 +10,11 @@ lib.mkIf (syncthing == true) {
     configDir = "/home/${username}/.config/syncthing";   # Folder for Syncthing's settings and keys
     };
   };
+
+  # Syncthing ports: 8384 for remote access to GUI
+  # 22000 TCP and/or UDP for sync traffic
+  # 21027/UDP for discovery
+  # source: https://docs.syncthing.net/users/firewall.html
+  networking.firewall.allowedTCPPorts = [ 8384 22000 ];
+  networking.firewall.allowedUDPPorts = [ 22000 21027 ];
 }