diff --git a/hosts/vm/configuration.nix b/hosts/vm/configuration.nix
index bf77502..d94b696 100644
--- a/hosts/vm/configuration.nix
+++ b/hosts/vm/configuration.nix
@@ -1,4 +1,4 @@
-{ pkgs, ... }:
+{ ... }:
 
 {
   system.stateVersion = "25.05";
@@ -51,6 +51,7 @@
   services.qemuGuest.enable = true;
   services.spice-vdagentd.enable = true;
 
+  networking.firewall.allowedTCPPorts = [ 22 ];
   services.openssh = {
     enable = true;
     harden = true;
diff --git a/modules/networking.nix b/modules/networking.nix
index 244807c..a9ecba5 100644
--- a/modules/networking.nix
+++ b/modules/networking.nix
@@ -7,8 +7,8 @@
       enable = true;
     };
   };
-  networking.firewall = {
-    enable = true;
-    allowedTCPPorts = [ 22 ];
+  networking = {
+    nftables.enable = true;
+    firewall.enable = true;
   };
 }