diff --git a/services/ofborg/default.nix b/services/ofborg/default.nix
index b8f8341..d80d796 100644
--- a/services/ofborg/default.nix
+++ b/services/ofborg/default.nix
@@ -26,10 +26,12 @@ in {
       webroot = "/var/lib/acme/.challenges";
       group = "rabbitmq";
     };
+
+    services.nginx.enable = true;
     services.nginx.virtualHosts.${amqpHost}.locations."/.well-known/acme-challenge".root =
       "/var/lib/acme/.challenges";
     systemd.services.rabbitmq.requires = ["acme-finished-${amqpHost}.target"];
 
-    networking.firewall.allowedTCPPorts = [ amqpPort ];
+    networking.firewall.allowedTCPPorts = [ 80 443 amqpPort ];
   };
 }