diff --git a/net/gmid/Makefile b/net/gmid/Makefile
index 77f762ac6788..49d248a77038 100644
--- a/net/gmid/Makefile
+++ b/net/gmid/Makefile
@@ -1,40 +1,39 @@
 PORTNAME=	gmid
-DISTVERSION=	2.0
-PORTREVISION=	1
+DISTVERSION=	2.0.4
 CATEGORIES=	net
 MASTER_SITES=	https://github.com/omar-polo/${PORTNAME}/releases/download/${DISTVERSION}/ \
 		https://ftp.omarpolo.com/
 
 MAINTAINER=	freebsd@omarpolo.com
 COMMENT=	Simple and secure Gemini server
 WWW=		https://gmid.omarpolo.com
 
 LICENSE=	ISCL
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 LIB_DEPENDS=	libevent.so:devel/libevent
 
 USES=		localbase pkgconfig ssl
 USE_RC_SUBR=	gmid
 
 HAS_CONFIGURE=	yes
 
 TEST_TARGET=	regress
 
 USERS=		_gmid
 GROUPS=		_gmid
 
 CONFIGURE_ARGS=	--sysconfdir=${PREFIX}/etc
 
 post-patch:
 	@${REINPLACE_CMD} -e 's|/man|/share/man|' ${WRKSRC}/configure
 
 post-install:
 	${INSTALL_DATA} ${FILESDIR}/gmid.conf.sample \
 		${STAGEDIR}${PREFIX}/etc/
 	@${STRIP_CMD} ${STAGEDIR}${PREFIX}/bin/gemexp
 	@${STRIP_CMD} ${STAGEDIR}${PREFIX}/bin/gg
 	@${STRIP_CMD} ${STAGEDIR}${PREFIX}/bin/gmid
 	@${STRIP_CMD} ${STAGEDIR}${PREFIX}/bin/titan
 
 .include <bsd.port.mk>
diff --git a/net/gmid/distinfo b/net/gmid/distinfo
index b2e6a36c737f..48811c06894a 100644
--- a/net/gmid/distinfo
+++ b/net/gmid/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1704989207
-SHA256 (gmid-2.0.tar.gz) = b6e0213eea014ce00326e9e0417150632e1988d79eab1d8d044c7dd3ea018f9d
-SIZE (gmid-2.0.tar.gz) = 182861
+TIMESTAMP = 1717683832
+SHA256 (gmid-2.0.4.tar.gz) = 820613f57d1993fece827b97faf7bc70169c35fde68045887d7369212992df94
+SIZE (gmid-2.0.4.tar.gz) = 192183
diff --git a/net/gmid/files/gmid.conf.sample b/net/gmid/files/gmid.conf.sample
index b4680f8d2acf..8ce5a0ec3823 100644
--- a/net/gmid/files/gmid.conf.sample
+++ b/net/gmid/files/gmid.conf.sample
@@ -1,24 +1,25 @@
 # drop privileges
 user "_gmid"
 
-# it's a good idea to enable chroot, but
-# beware that can make CGI scripting harder
+# it's a good idea to enable chroot
 chroot "/var/gemini"
 
 # An example of a server block:
 server "localhost" {
+	listen on * port 1965
+
 	# set the directory to serve; it's relative to the
 	# chroot (if enabled)
 	root "/localhost"
 
 	# Set self-signed TLS cert and key.  It's better to keep
 	# the keys outside the chroot.
 	#
 	# You should generate them manually, for example:
 	# openssl req -x509 -newkey rsa:4096 -nodes		\
 	#	-out /usr/local/etc/ssl/gmid/localhost.crt	\
 	#	-keyout /usr/local/etc/ssl/gmid/localhost.key	\
 	# 	-subj "/CN=localhost"
 	cert "/usr/local/etc/ssl/gmid/localhost.crt"
 	key  "/usr/local/etc/ssl/gmid/localhost.key"
 }