diff --git a/flake.nix b/flake.nix
old mode 100755
new mode 100644
index 34e7d77..5899154
--- a/flake.nix
+++ b/flake.nix
@@ -119,6 +119,7 @@
           nextcloud = import ./modules/server/nextcloud.nix flakeContext;
           nginx = import ./modules/server/cloudflared.nix flakeContext;
           zerotier = import ./modules/server/zerotier.nix flakeContext;
+          xray = import ./modules/server/xray.nix flakeContext;
         };
       };
 
diff --git a/modules/server/xray.nix b/modules/server/xray.nix
new file mode 100644
index 0000000..35950b2
--- /dev/null
+++ b/modules/server/xray.nix
@@ -0,0 +1,14 @@
+{ inputs, ... }@flakeContext:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+{
+  networking.firewall = {
+    allowedTCPPorts = [ 443 ];
+    allowedUDPPorts = [ 443 ];
+  };
+  environment.systemPackages = with pkgs; [ xray ];
+}