diff --git a/systems/ceres/config/wireguard.nix b/systems/ceres/config/wireguard.nix
index 4b4415b..fd117e7 100755
--- a/systems/ceres/config/wireguard.nix
+++ b/systems/ceres/config/wireguard.nix
@@ -1,6 +1,6 @@
 { config, flake, ... }:
 let
-  inherit (flake.config.services.instances) wireGuard;
+  inherit (flake.config.services.instances) wireGuard searx;
   inherit (flake.config.machines.devices) mars ceres;
   service = wireGuard;
 in
@@ -15,6 +15,9 @@ in
         service.ports.port0
         service.ports.port1
       ];
+      interfaces.wg0.allowedTCPPorts = [
+        searx.ports.port0
+      ];
     };
 
     nat = {