diff --git a/hosts/ds9/default.nix b/hosts/ds9/default.nix
index 962a8be9..ede5d26f 100644
--- a/hosts/ds9/default.nix
+++ b/hosts/ds9/default.nix
@@ -47,6 +47,7 @@ in
   networking.bridges."br0".interfaces = [ ];
   networking.hostId = "7b4c2932";
   networking.firewall.allowedTCPPorts = [ 9000 25565 80 443 ];
+  networking.firewall.allowedUDPPorts = [ 443 ]; # http3 :3
   boot.initrd.network = {
     enable = true;
     postCommands = ''