diff --git a/modules/services/frigate/default.nix b/modules/services/frigate/default.nix
index 742f2e2..e7901e0 100644
--- a/modules/services/frigate/default.nix
+++ b/modules/services/frigate/default.nix
@@ -11,8 +11,9 @@ in
       auth.reset_admin_password = true; # roll the admin password every restart, depend on user accounts for long-lived access
       tls.enabled = false; # off because we're doing ssl through the proxy
       mqtt = {
-        # TODO: add mqtt broker
-        enabled = false;
+        enabled = true;
+        host = "host.containers.internal";
+        port = 1883;
       };
       notifications = {
         enabled = true;
@@ -56,7 +57,6 @@ in
         track = [
           "person"
           "cat"
-          "car"
           "dog"
         ];
       };
diff --git a/modules/services/mqtt/default.nix b/modules/services/mqtt/default.nix
index 42b478e..52404f2 100644
--- a/modules/services/mqtt/default.nix
+++ b/modules/services/mqtt/default.nix
@@ -9,4 +9,6 @@
       }
     ];
   };
+
+  networking.firewall.allowedTCPPorts = [1883];
 }