Create a new service entry:
firewall-cmd --permanent --new-service=ollama
Associate the right port with new service:
firewall-cmd --permanent --service=ollama --add-port=11434/tcp
Restart the firewalld, so it’s aware of the new service:
firewall-cmd --reload
Finally, associate the service with the Zone. I don’t use --permanent here on purpose. This way the association will be lost when I will reboot the machine:
firewall-cmd --add-service=ollama --zone=nm-shared