diff --git a/hosts/legion/nas/media.nix b/hosts/legion/nas/media.nix
index ed5fec1..f380498 100644
--- a/hosts/legion/nas/media.nix
+++ b/hosts/legion/nas/media.nix
@@ -10,7 +10,10 @@
     owner = config.services.nginx.user;
   };
 
-  services.jellyfin.enable = true;
+  services.jellyfin = {
+    enable = true;
+    openFirewall = true;
+  };
   services.radarr.enable = true;
   services.sonarr.enable = true;
   services.prowlarr.enable = true;