diff --git a/modules/services/monitoring.nix b/modules/services/monitoring.nix
index 848e838..a22d5f9 100644
--- a/modules/services/monitoring.nix
+++ b/modules/services/monitoring.nix
@@ -26,8 +26,6 @@
   networking.firewall = {
     allowedTCPPorts = [
       9001
-      22
-      9123 # always also allow ssh :screaming:
     ];
   };
 }