diff --git a/hosts/alo-cloud-1/default.nix b/hosts/alo-cloud-1/default.nix
index c63e340..7742ea0 100644
--- a/hosts/alo-cloud-1/default.nix
+++ b/hosts/alo-cloud-1/default.nix
@@ -27,7 +27,7 @@
 
   # Security hardening: Enable firewall (override global setting)
   networking.firewall = {
-    enable = true;
+    enable = lib.mkForce true;
     allowedTCPPorts = [ 80 443 ];  # Public web traffic only
     allowedUDPPorts = [ 41641 ];   # Tailscale
     trustedInterfaces = [ "tailscale0" ];  # Full access via VPN