diff --git a/setup.sh b/setup.sh
index e0bc873..1dd2542 100755
--- a/setup.sh
+++ b/setup.sh
@@ -105,6 +105,11 @@ chmod 440 /etc/sudoers.d/deploy
 echo "==> Making scripts executable..."
 chmod +x "$REPO_DIR/scripts/"*.sh
 
+echo "==> Opening firewall ports..."
+firewall-cmd --permanent --add-service=http
+firewall-cmd --permanent --add-service=https
+firewall-cmd --reload
+
 echo "==> Setting up certbot..."
 mkdir -p "$REPO_DIR/docker/nginx/certbot/www"
 mkdir -p /etc/letsencrypt/renewal-hooks/deploy