diff --git a/global/overlay/etc/puppet/cosmos-rules.yaml b/global/overlay/etc/puppet/cosmos-rules.yaml
index b1c5217e..7a4a6255 100644
--- a/global/overlay/etc/puppet/cosmos-rules.yaml
+++ b/global/overlay/etc/puppet/cosmos-rules.yaml
@@ -1250,6 +1250,8 @@ monitoreidas-prod-sto1-1.komreg.net:
    sunet::naemon_monitor:
       domain: monitor-eidas.komreg.net
       acme_protocol: acme-d
+      thruk_allow_clients:
+         - 130.242.121.23/32  # vpn1.sunet.se
       naemon_tag: latest
       thruk_tag: latest
       histou_tag: latest