diff --git a/flake.lock b/flake.lock
index f667546a..b23edeae 100644
--- a/flake.lock
+++ b/flake.lock
@@ -374,11 +374,11 @@
     },
     "nixpkgs_4": {
       "locked": {
-        "lastModified": 1720553833,
-        "narHash": "sha256-IXMiHQMtdShDXcBW95ctA+m5Oq2kLxnBt7WlMxvDQXA=",
+        "lastModified": 1720691131,
+        "narHash": "sha256-CWT+KN8aTPyMIx8P303gsVxUnkinIz0a/Cmasz1jyIM=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "249fbde2a178a2ea2638b65b9ecebd531b338cf9",
+        "rev": "a046c1202e11b62cbede5385ba64908feb7bfac4",
         "type": "github"
       },
       "original": {
diff --git a/modules/services/rss.nix b/modules/services/rss.nix
index 847eaad9..be44fee6 100644
--- a/modules/services/rss.nix
+++ b/modules/services/rss.nix
@@ -13,5 +13,7 @@ in
 
   config = mkIf cfg.enable {
     services.commafeed.enable = true;
+
+    networking.firewall.allowedTCPPorts = [ 8082 ];
   };
 }