diff --git a/nix/os/devices/CFB4ED74/pkg.nix b/nix/os/devices/CFB4ED74/pkg.nix
index 43091a2..b9a638e 100644
--- a/nix/os/devices/CFB4ED74/pkg.nix
+++ b/nix/os/devices/CFB4ED74/pkg.nix
@@ -4,4 +4,9 @@
 
 {
   home-manager.users.steveej = import ../../../home-manager/configuration/text-minimal.txt;
+
+  services.syncthing = {
+    enable = true;
+    openDefaultPorts = true;
+  };
 }
diff --git a/nix/os/devices/CFB4ED74/system.nix b/nix/os/devices/CFB4ED74/system.nix
index ed8cd1a..f401d6e 100644
--- a/nix/os/devices/CFB4ED74/system.nix
+++ b/nix/os/devices/CFB4ED74/system.nix
@@ -10,7 +10,7 @@ in {
   # TASK: new device
   networking.hostName = "CFB4ED74"; # Define your hostname.
 
-  networking.firewall.enable = lib.mkForce false;
+  networking.firewall.enable = true;
 
   # Kubernetes
   # services.kubernetes.roles = ["master" "node"];