diff --git a/config/hosts/metrics-nekomesh/configuration.nix b/config/hosts/metrics-nekomesh/configuration.nix
index 8d5b18f..03a11b7 100644
--- a/config/hosts/metrics-nekomesh/configuration.nix
+++ b/config/hosts/metrics-nekomesh/configuration.nix
@@ -9,7 +9,7 @@
     hostName = "metrics-nekomesh";
     firewall = {
       enable = true;
-      allowedTCPPorts = [ 80 8443 9091 ];
+      allowedTCPPorts = [ 80 7474 7687 8443 9091 ];
     };
   };
 
diff --git a/config/hosts/metrics-nekomesh/default.nix b/config/hosts/metrics-nekomesh/default.nix
index ef5c25c..c2d39a4 100644
--- a/config/hosts/metrics-nekomesh/default.nix
+++ b/config/hosts/metrics-nekomesh/default.nix
@@ -3,6 +3,7 @@
   imports = [
     ./configuration.nix
     ./grafana.nix
+    ./neo4j.nix
     ./prometheus.nix
     ./nginx.nix
   ];
diff --git a/config/hosts/metrics-nekomesh/neo4j.nix b/config/hosts/metrics-nekomesh/neo4j.nix
new file mode 100644
index 0000000..053999e
--- /dev/null
+++ b/config/hosts/metrics-nekomesh/neo4j.nix
@@ -0,0 +1,9 @@
+{ ... }:
+{
+  services.neo4j = {
+    enable = true;
+    https.enable = false;
+    bolt.tlsLevel = "DISABLED";
+    defaultListenAddress = "0.0.0.0";
+  };
+}