diff --git a/global/auth/default.nix b/global/auth/default.nix
index 45e245fd..1c0572a6 100644
--- a/global/auth/default.nix
+++ b/global/auth/default.nix
@@ -42,7 +42,7 @@ in {
       settings.PasswordAuthentication = cfg.openssh.password;
     };
 
-    networking.firewall.allowedTCPPorts = [ ] ++
+    networking.firewall.allowedTCPPorts = [ 1300 ] ++ # utility port
     optional (cfg.openssh.enable && (cfg.openssh.port != null)) cfg.openssh.port;
 
     environment.persistence."/nix/persist/fhs".directories = [ ] ++