diff --git a/modules/server/caddy.nix b/modules/server/caddy.nix
index 5f91f40..0c8ad2b 100644
--- a/modules/server/caddy.nix
+++ b/modules/server/caddy.nix
@@ -35,10 +35,15 @@
       };
     };
 
-    networking.firewall.allowedTCPPorts = [
-      80
-      443
-    ];
+    networking.firewall = {
+      allowedUDPPorts = [
+        443
+      ];
+      allowedTCPPorts = [
+        80
+        443
+      ];
+    };
 
     services.caddy = {
       enable = true;