diff --git a/defaults/main.yml b/defaults/main.yml
index 1d95f02..9db786c 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -5,3 +5,5 @@ cockpit_packages:
   - cockpit
   - cockpit-bridge
   - cockpit-machines
+cockpit_use_firewalld: false
+cockpit_listen_port: 9090
diff --git a/tasks/main.yml b/tasks/main.yml
index 3dda1a2..0374704 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -14,10 +14,11 @@
 
 - name: enable firewall
   firewalld:
-    service: cockpit
+    port: "{{ cockpit_listen_port }}/tcp"
     permanent: true
     immediate: true
     state: enabled
+  when: cockpit_use_firewalld
 
 - name: reload systemd if unit file changed
   command: systemctl daemon-reload