diff --git a/nixos/hosts/shadowfax/default.nix b/nixos/hosts/shadowfax/default.nix
index 5a2ef65..6e04388 100644
--- a/nixos/hosts/shadowfax/default.nix
+++ b/nixos/hosts/shadowfax/default.nix
@@ -93,6 +93,14 @@ in
     };
   };
 
+  # Open minio ports for firewall
+  networking.firewall = {
+    allowedTCPPorts = [
+      9000 # console web interface
+      9001 # api interface
+    ];
+  };
+
   services = {
     # Minio
     minio = {