diff --git a/nixos/hosts/eidola/nebula.nix b/nixos/hosts/eidola/nebula.nix
index 70118b5..da15334 100644
--- a/nixos/hosts/eidola/nebula.nix
+++ b/nixos/hosts/eidola/nebula.nix
@@ -7,6 +7,9 @@ in {
     group = userGroup;
   };
 
+  # TODO: why?
+  networking.firewall.allowedUDPPorts = [4242];
+
   gen.nebula = {
     enable = true;
     enableLighthouse = false;
diff --git a/nixos/modules/nebula/default.nix b/nixos/modules/nebula/default.nix
index b537aa4..840fb54 100644
--- a/nixos/modules/nebula/default.nix
+++ b/nixos/modules/nebula/default.nix
@@ -56,7 +56,10 @@ with lib; let
     relays = lhsInternal;
     staticHostMap = lhs;
 
-    settings.punchy.punch = true;
+    settings.punchy = {
+      punch = true;
+      respond = true;
+    };
   };
 
   cfg = config.gen.nebula;