removing open ports when sibling project removed

firewall.conf

@@ -1,5 +1,7 @@
-# Allowed through firewalld (default zone) by install and update.
-# Removing an entry here does not close it; use firewall-cmd for that.
+# Allowed through firewalld (default zone) by install, update and sibling.
+# Sibling projects can have a firewall.conf in this same format at the top of
+# their repo. Removing an entry closes it on the next update, unless another
+# firewall.conf still lists it or it was open before MiniServer opened it.
 
 # firewalld service names (see `firewall-cmd --get-services`)
 FIREWALL_SERVICES=(
@@ -12,4 +14,7 @@ FIREWALL_SERVICES=(
 # Extra ports, e.g. for pm2 apps: "3000/tcp"
 # Docker containers' published ports don't need to be listed here.
 FIREWALL_PORTS=(
+  3000/tcp
+  8080/tcp
+  8081/tcp
 )