diff --git a/configuration.nix b/configuration.nix
index 5b7c0bc..c10553a 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -602,14 +602,15 @@ in {
         53
         80
         443
-        3478
-        5349
-        5350 # coturn
+        3478 # headscale
+        5349 # turn
+        5350 # turn
       ];
       allowedUDPPorts = [
         53
         443
-        41641
+        3478 # headscale
+        41641 # tailscale
       ];
       allowedUDPPortRanges = coturn;
       logRefusedConnections = false;