diff --git a/Dockerfile.gnome b/Dockerfile.gnome
index e852893..e733aa7 100644
--- a/Dockerfile.gnome
+++ b/Dockerfile.gnome
@@ -26,5 +26,9 @@ RUN dnf5 -y remove bash-color-prompt
 # Apply configuration
 COPY etc /etc
 
+# Apply hardened firewall configuration
+RUN firewall-offline-cmd --set-default-zone public
+RUN firewall-offline-cmd --remove-service ssh
+
 # https://github.com/ostreedev/ostree-rs-ext/issues/159
 RUN ostree container commit
diff --git a/Dockerfile.kde b/Dockerfile.kde
index 472e3fe..ce846db 100644
--- a/Dockerfile.kde
+++ b/Dockerfile.kde
@@ -26,5 +26,9 @@ RUN dnf5 -y remove bash-color-prompt
 # Apply configuration
 COPY etc /etc
 
+# Apply hardened firewall configuration
+RUN firewall-offline-cmd --set-default-zone public
+RUN firewall-offline-cmd --remove-service ssh
+
 # https://github.com/ostreedev/ostree-rs-ext/issues/159
 RUN ostree container commit