diff --git a/configuration.nix b/configuration.nix
index 0e97aee..9d76c29 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -29,6 +29,7 @@
   networking.firewall.enable = true;
   # Required for Tailscale
   networking.firewall.checkReversePath = "loose";
+  networking.firewall.interfaces."tailscale0".allowedTCPPorts = [ 4096 ];
 
   services.tailscale.enable = true;
 
diff --git a/home.nix b/home.nix
index e52f995..aa9932a 100644
--- a/home.nix
+++ b/home.nix
@@ -254,6 +254,8 @@ in
       "nfu" = "nix flake update";
       "c" = "claude";
       "o" = "opencode";
+      "ow" =
+        "URL=\"https://$(tailscale status --json | jq -r '.Self.DNSName | sub(\"\\.$\"; \"\")')\"; printf 'Open on phone: %s\\n' \"$URL\"; tailscale serve --bg 443 http://127.0.0.1:4096; opencode web --hostname 127.0.0.1 --port 4096";
       ".." = "z ..";
       j = "jj";
       jgf = "jj git fetch";