diff --git a/hosts/default/configuration.nix b/hosts/default/configuration.nix
index a7eac32..eb69a43 100644
--- a/hosts/default/configuration.nix
+++ b/hosts/default/configuration.nix
@@ -312,14 +312,10 @@
 
   # Open ports in the firewall.
   networking.firewall.allowedTCPPorts = [
-    80 # http
-    443 # https
     53317 # Localsend
     7791 # Pixelflut
   ];
   networking.firewall.allowedUDPPorts = [
-    80
-    443
     53317
   ];
   # Or disable the firewall altogether.
diff --git a/modules/websites/default.nix b/modules/websites/default.nix
index 09b9756..781dce2 100644
--- a/modules/websites/default.nix
+++ b/modules/websites/default.nix
@@ -119,6 +119,15 @@ in
 
         virtualHosts = hosts;
       };
+
+      networking.firewall.allowedTCPPorts = [
+        80 # http
+        443 # https
+      ];
+      networking.firewall.allowedUDPPorts = [
+        80 # http
+        443 # https
+      ];
     }
   );
 }