diff --git a/hosts/chocolatebar/chocolatebar.nix b/hosts/chocolatebar/chocolatebar.nix
index 52a5a96f..37084285 100644
--- a/hosts/chocolatebar/chocolatebar.nix
+++ b/hosts/chocolatebar/chocolatebar.nix
@@ -19,6 +19,7 @@ in
     ];
 
     services.openssh.openFirewall = true;
+    networking.firewall.allowedTCPPorts = mkIf psCfg.sway.vnc.enable [ 5901 ];
 
     environment.systemPackages = with pkgs; [
       wayvnc