diff --git a/service-configs.nix b/service-configs.nix
index 883c84e..9242b1e 100644
--- a/service-configs.nix
+++ b/service-configs.nix
@@ -20,6 +20,7 @@ rec {
     coturn_tls = 5349;
     livekit = 7880;
     soulseek_listen = 50300;
+    monero = 18080;
 
     # private
     jellyfin = 8096; # no services.jellyfin option for this
@@ -38,6 +39,7 @@ rec {
     radarr = 7878;
     bazarr = 6767;
     jellyseerr = 5055;
+    monero_rpc = 18081;
   };
 
   https = {
diff --git a/services/monero.nix b/services/monero.nix
index 7b7f0bc..16a5b9a 100644
--- a/services/monero.nix
+++ b/services/monero.nix
@@ -17,7 +17,15 @@
     enable = true;
     dataDir = service_configs.monero.dataDir;
     rpc = {
+      port = service_configs.ports.monero_rpc;
       restricted = true;
     };
+    extraConfig = ''
+      p2p-bind-port=${builtins.toString service_configs.ports.monero}
+    '';
   };
+
+  networking.firewall.allowedTCPPorts = [
+    service_configs.ports.monero
+  ];
 }