diff --git a/hosts/Infini-DL360/authentik.nix b/hosts/Infini-DL360/authentik.nix
index a669234..c1ba72c 100644
--- a/hosts/Infini-DL360/authentik.nix
+++ b/hosts/Infini-DL360/authentik.nix
@@ -50,8 +50,8 @@ in
   };
 
   networking.firewall.allowedTCPPorts = [
-    3389
-    6636
+    3389 # <- 389 port forwarded, LDAP
+    6636 # <- 636 port forwarded, LDAPS
   ];
 
   security.acme.certs.${ldap} = {