diff --git a/hosts/glyph/services/ntfy.nix b/hosts/glyph/services/ntfy.nix
index b7926807..c6146a50 100644
--- a/hosts/glyph/services/ntfy.nix
+++ b/hosts/glyph/services/ntfy.nix
@@ -35,10 +35,12 @@ in {
     enable = true;
     settings = {
       base-url = "http://glyph:2586";
-      listen-http = "127.0.0.1:2586";
+      listen-http = ":2586";
     };
   };
 
+  networking.firewall.interfaces.tailscale0.allowedTCPPorts = [2586];
+
   systemd.services.ntfy-slack-relay = {
     description = "Forward ntfy notifications to Slack";
     after = ["ntfy-sh.service" "network.target"];