diff --git a/hosts/pi4/actual.nix b/hosts/pi4/actual.nix
index fbf0d50..596cb27 100644
--- a/hosts/pi4/actual.nix
+++ b/hosts/pi4/actual.nix
@@ -1,6 +1,7 @@
 { config, common, ... }:
 let
   domain = "beta.budget.${common.domain}";
+  port = 8084;
 in
 {
   networking.nat = {
@@ -19,11 +20,12 @@ in
     config =
       { ... }:
       {
+        networking.firewall.allowedTCPPorts = [ port ];
         services = {
           actual = {
             enable = true;
             settings = {
-              port = 8084;
+              inherit port;
               loginMethod = "password";
             };
           };
@@ -35,7 +37,7 @@ in
     forceSSL = true;
     enableACME = true;
     locations."/" = {
-      proxyPass = "http://${config.containers.actual.localAddress}:8084";
+      proxyPass = "http://${config.containers.actual.localAddress}:${toString port}";
       proxyWebsockets = true;
     };
   };