diff --git a/machines/kcnhub/configuration.nix b/machines/kcnhub/configuration.nix
index f888817..18f018b 100644
--- a/machines/kcnhub/configuration.nix
+++ b/machines/kcnhub/configuration.nix
@@ -16,7 +16,7 @@
       ./users.nix
     ];
 
-  networking.firewall.enable = false;
+  networking.firewall.enable = true;
 
   # Use the systemd-boot EFI boot loader.
   boot.loader.systemd-boot.enable = true;
@@ -75,7 +75,7 @@
   # List services that you want to enable:
 
   # Enable the OpenSSH daemon.
-  # services.openssh.enable = true;
+  services.openssh.enable = true;
 
   # Open ports in the firewall.
   # networking.firewall.allowedTCPPorts = [ ... ];