add

#firewall-cmd --zone=public --add-port=443/tcp --permanent
#firewall-cmd --reload

show

# firewall-cmd --list-all

remove

firewall-cmd --zone=public --remove-port=8000/tcp