diff --git a/machines/mibook/network.nix b/machines/mibook/network.nix
index 717010c..58d4970 100644
--- a/machines/mibook/network.nix
+++ b/machines/mibook/network.nix
@@ -4,5 +4,6 @@ _: {
   # firewall otherwise blocks inbound connections from other devices.
   networking.firewall.allowedTCPPorts = [
     9119 # athena hermes dashboard
+    47823 # hermes agent ad-hoc webpage server
   ];
 }