diff --git a/modules/nixos/monitoring/source/prometheus.nix b/modules/nixos/monitoring/source/prometheus.nix
index afc816ab..984b9533 100644
--- a/modules/nixos/monitoring/source/prometheus.nix
+++ b/modules/nixos/monitoring/source/prometheus.nix
@@ -68,7 +68,7 @@ in {
     };
     networking.firewall.interfaces.lan.allowedTCPPorts = let
       # blacklist broken/deprecated exporters
-      allExporters = removeAttrs config.services.prometheus.exporters ["unifi-poller" "minio"];
+      allExporters = removeAttrs config.services.prometheus.exporters ["unifi-poller" "minio" "tor"];
       enablePort = fallback: exporter: exporter.enable or fallback && !exporter.openFirewall or (!fallback);
       mkExporterPorts = name: exporters': let
         exporters = toList exporters';