diff --git a/hosts/mups/configuration.nix b/hosts/mups/configuration.nix
index 8596441..24fe51b 100644
--- a/hosts/mups/configuration.nix
+++ b/hosts/mups/configuration.nix
@@ -55,6 +55,11 @@ in {
       default = true;
       locations."/" = { proxyPass = "http://localhost:8008"; };
     };
+    "nvr.muon.host" = {
+      enableACME = true;
+      forceSSL = true;
+      locations."/" = { proxyPass = "http://10.0.0.2:8095"; };
+    };
     "tetterodesportcomplex.nl" = {
       enableACME = true;
       forceSSL = true;
diff --git a/modules/nixos/server/nvr.nix b/modules/nixos/server/nvr.nix
index 130ccb8..dfb2678 100644
--- a/modules/nixos/server/nvr.nix
+++ b/modules/nixos/server/nvr.nix
@@ -13,9 +13,9 @@ in with lib; {
   };
 
   config = mkIf cfg.enable {
-    networking.firewall.allowedTCPPorts = [ 8095 ];
     services.zoneminder = {
       enable = true;
+      openFirewall = true;
       database = {
         createLocally = true;
         username = "zoneminder";