diff --git a/backend/app/service/app.go b/backend/app/service/app.go
index e8e5e63eb..14b1b3efc 100644
--- a/backend/app/service/app.go
+++ b/backend/app/service/app.go
@@ -318,6 +318,11 @@ func (a AppService) Install(ctx context.Context, req request.AppInstallCreate) (
 	}
 	go upApp(ctx, appInstall.GetComposePath(), appInstall)
 	go updateToolApp(appInstall)
+	ports := []int{appInstall.HttpPort}
+	if appInstall.HttpsPort > 0 {
+		ports = append(ports, appInstall.HttpsPort)
+	}
+	go OperateFirewallPort(nil, ports)
 	return &appInstall, nil
 }