diff --git a/hosts/sobotka/server.nix b/hosts/sobotka/server.nix
index f5261107..ccc96626 100644
--- a/hosts/sobotka/server.nix
+++ b/hosts/sobotka/server.nix
@@ -62,7 +62,7 @@
       };
       pihole = {
         enable = true;
-        port = 8054;
+        port = 8053;
       };
     };
   };
diff --git a/modules/server/podman/default.nix b/modules/server/podman/default.nix
index 03804a71..3d7e9461 100644
--- a/modules/server/podman/default.nix
+++ b/modules/server/podman/default.nix
@@ -74,7 +74,7 @@ in {
       podman.enable = true;
     };
 
-    networking.firewall = {
+    networking.firewall = lib.mkIf cfg.pihole.enable {
       allowedTCPPorts = [53 5335];
       allowedUDPPorts = [53 5335];
     };