diff --git a/configs/firewalld/public-ports.md b/configs/firewalld/public-ports.md
index 12ea2b2..ee433d2 100644
--- a/configs/firewalld/public-ports.md
+++ b/configs/firewalld/public-ports.md
@@ -59,3 +59,16 @@ Forgejo advertises `SSH_PORT=9200`. Traffic hits **host:9200** (not Caddy). With
 |------|--------|
 | 2026-07-09 | 443/tcp re-added for IPv6 |
 | 2026-07-10 | **9200/tcp** for Forgejo git-SSH (verified LAN + hairpin + SSH auth) |
+
+## Nym (`koopa-nym`, nym.com)
+
+| Port | Proto | Role |
+|------|-------|------|
+| 1789 | tcp/udp | mixnet Sphinx |
+| 1790 | tcp | verloc |
+| 9080 | tcp | HTTP API (optional public; often loopback-only via Caddy if proxied) |
+| 19000 | tcp | entry gateway websocket (if mode=entry/exit-gateway) |
+| 51822 | udp | WireGuard (if NYMNODE_WG_ENABLED) |
+
+Do **not** collide with Tor ORPort **8080** or Caddy **9000/9001**.
+