diff --git a/services/sks.nix b/services/sks.nix
index 2ced720..89f425c 100644
--- a/services/sks.nix
+++ b/services/sks.nix
@@ -9,4 +9,7 @@
   };
 
   services.sks.enable = true;
+  services.sks.hkpAddress = [ "0.0.0.0"];
+
+  networking.firewall.allowedTCPPorts = [80 443 config.services.sks.hkpPort];
 }