diff --git a/manifests/proxysql.pp b/manifests/proxysql.pp
index c75edeb..57298db 100644
--- a/manifests/proxysql.pp
+++ b/manifests/proxysql.pp
@@ -79,7 +79,7 @@ class sunetdrive::proxysql (
       iif           => 'ens3',
     }
     sunet::nftables::docker_expose { 'proxysql':
-      allow_clients => ['any'],
+      allow_clients => $nextcloud_ip,
       port          => 6032,
       iif           => 'ens3',
     }