diff --git a/modules/networking.nix b/modules/networking.nix
index 5538229..4854d64 100644
--- a/modules/networking.nix
+++ b/modules/networking.nix
@@ -16,7 +16,14 @@
 
   # Firewall configuration
   networking.firewall = {
-    allowedTCPPorts = [ 631 6566 22067 8384 80 443 ];
+    allowedTCPPorts = [
+      631 # Cups
+      6566 # SANE
+      22067 # Syncthing relay
+      8384 # Syncthing GUI
+      80
+      443
+    ];
     autoLoadConntrackHelpers = true;
     connectionTrackingModules = [ "sane" ];
   };