diff --git a/services/transmission.nix b/services/transmission.nix
index de1ad10..b642c56 100644
--- a/services/transmission.nix
+++ b/services/transmission.nix
@@ -49,6 +49,9 @@ in
         rpc-whitelist-enabled = true;
         rpc-whitelist = "127.0.0.1";
       };
+
+      # automatically allow transmission.settings.peer-port
+      openFirewall = true;
     };
 
     services.nginx.virtualHosts."${webuiDomain}" = {
@@ -57,10 +60,5 @@ in
 
       locations."/".proxyPass = "http://127.0.0.1:${toString transmissionRpcPort}";
     };
-
-    networking.firewall = {
-      allowedTCPPorts = [ transmissionPeerPort ];
-      allowedUDPPorts = [ transmissionPeerPort ];
-    };
   };
 }