diff --git a/services/jellyfin.nix b/services/jellyfin.nix
index 6761c1a..2ab9b12 100644
--- a/services/jellyfin.nix
+++ b/services/jellyfin.nix
@@ -19,8 +19,6 @@
 
   services.jellyfin = {
     enable = true;
-    # used for local streaming
-    openFirewall = true;
     package = pkgs.jellyfin.override { jellyfin-ffmpeg = (lib.optimizePackage pkgs.jellyfin-ffmpeg); };
 
     inherit (service_configs.jellyfin) dataDir cacheDir;
diff --git a/tests/fail2ban-jellyfin.nix b/tests/fail2ban-jellyfin.nix
index 165dcd0..195c5f7 100644
--- a/tests/fail2ban-jellyfin.nix
+++ b/tests/fail2ban-jellyfin.nix
@@ -55,6 +55,9 @@ pkgs.testers.runNixOSTest {
           jellyfinModule
         ];
 
+        # needed for testing
+        services.jellyfin.openFirewall = true;
+
         # Create the media group
         users.groups.media = { };