diff --git a/modules/linux/opensnitch.nix b/modules/linux/opensnitch.nix
new file mode 100644
index 0000000..c68fee0
--- /dev/null
+++ b/modules/linux/opensnitch.nix
@@ -0,0 +1,16 @@
+{ config, lib, pkgs, ... }:
+
+{
+  services.opensnitch = {
+    enable = true;
+    settings = {
+      DefaultAction = "allow";
+      LogLevel = 2;
+      Stats.MaxEvents = 3;
+    };
+  };
+
+  environment.systemPackages = [
+    pkgs.opensnitch-ui
+  ];
+}
diff --git a/stow/.config/hypr/hyprland.conf b/stow/.config/hypr/hyprland.conf
index 83c4b73..f2cf47b 100755
--- a/stow/.config/hypr/hyprland.conf
+++ b/stow/.config/hypr/hyprland.conf
@@ -18,6 +18,7 @@ exec-once = waybar &
 exec-once = swaync &
 exec-once = walker --gapplication-service
 
+exec-once = opensnitch-ui
 exec-once = systemctl status --user polkit-gnome-authentication-agent-1.service
 exec-once = uwsm finalize
 
@@ -263,6 +264,13 @@ windowrulev2 = pin, initialClass:(^polkit-gnome-authentication-agent-1$)
 windowrulev2 = stayfocused, initialClass:(^polkit-gnome-authentication-agent-1$)
 windowrulev2 = animation slidein, initialClass:(^polkit-gnome-authentication-agent-1$)
 
+windowrulev2 = dimaround, initialClass:(^opensnitch_ui$)
+windowrulev2 = stayfocused, initialClass:(^opensnitch_ui$)
+windowrulev2 = animation slidein, initialClass:(^opensnitch_ui$)
+windowrulev2 = float, initialClass:(^opensnitch_ui$)
+windowrulev2 = size 960 540, initialClass:(^opensnitch_ui$)
+windowrulev2 = center, initialClass:(^opensnitch_ui$)
+
 windowrulev2 = idleinhibit fullscreen, initialTitle:(.*)
 
 # layer rules