diff --git a/global/overlay/etc/puppet/modules/eid/manifests/idm_app.pp b/global/overlay/etc/puppet/modules/eid/manifests/idm_app.pp
index be3aea23..e13a6dae 100644
--- a/global/overlay/etc/puppet/modules/eid/manifests/idm_app.pp
+++ b/global/overlay/etc/puppet/modules/eid/manifests/idm_app.pp
@@ -15,6 +15,12 @@ class eid::idm_app (
   }
 
 
+  sunet::nftables::allow { 'expose-allow-https':
+    from => ['94.176.224.38', '94.176.224.166'],
+    port => 443,
+  }
+
+
   package {'openjdk-17-jre-headless':
     ensure => latest
   }