diff --git a/networking/firewall.mod.nix b/networking/firewall.mod.nix
index 443ce93..c35ef7e 100644
--- a/networking/firewall.mod.nix
+++ b/networking/firewall.mod.nix
@@ -11,6 +11,7 @@
         allowedUDPPorts = [
           #    53 # pihole
           #    5894 # couchdb
+          222 # forgejo ssh. for the handshake i think
         ];
         allowedTCPPorts = [
           222 # forgejo ssh