diff --git a/install.sh b/install.sh
index 458de8e..6b23fcf 100755
--- a/install.sh
+++ b/install.sh
@@ -235,3 +235,13 @@ cp bin/* /usr/local/bin/
 chmod 755 sbin/*
 cp sbin/* /usr/local/sbin/
 
+# enable http (port 80) and https (port 443) in the firewall
+[[ -d /etc/firewalld/ ]]; then
+  firewall-cmd --zone=public --add-service=http
+  firewall-cmd --permanent --zone=public --add-service=http
+  firewall-cmd --zone=public --add-service=https
+  firewall-cmd --permanent --zone=public --add-service=https
+else
+  echo "firewalld not installed, not opening http ports in firewall."
+fi
+