diff --git a/roles/forgejo.nix b/roles/forgejo.nix
index b4254cb..7464dce 100644
--- a/roles/forgejo.nix
+++ b/roles/forgejo.nix
@@ -42,7 +42,8 @@
         in
         {
           networking.firewall.allowedTCPPorts = [
-            3000
+            3000 # Forgejo
+            2222 # Forgejo built-in ssh server
           ];
 
           # Create the database