diff --git a/configs/ports.md b/configs/ports.md
index 24aad5d..7ee6181 100644
--- a/configs/ports.md
+++ b/configs/ports.md
@@ -24,3 +24,10 @@
 VeciGate: WAN **80→9000**, WAN **443→9001**.  
 Public apps: Caddy vhosts on **9001** → 127.0.0.1:{9010–9015, 9020–9025, 9090–9092}.  
 Git SSH needs separate NAT/firewall **9200/tcp** if exposed to WAN.
+
+| **1789** | podman **`koopa-nym`** mixnet (nym.com nym-node) |
+| **1790** | podman **`koopa-nym`** verloc |
+| **9080** | podman **`koopa-nym`** HTTP API (mapped from container 8080; Tor keeps **8080**) |
+| **19000** | optional nym entry WS (gateway mode) |
+| **51822/udp** | optional nym WireGuard (dVPN path) |
+