diff --git a/hosts/aspi/default.nix b/hosts/aspi/default.nix
index 5a64010..128a9e3 100644
--- a/hosts/aspi/default.nix
+++ b/hosts/aspi/default.nix
@@ -32,6 +32,9 @@
 
   # networking.firewall.checkReversePath = false; # Makes wg interface with all ips work
 
+  programs.ausweisapp.enable = true;
+  programs.ausweisapp.openFirewall = true; # for pairing with smartphone
+
   modules = {
     syncthing = {
       enable = true;