diff --git a/tf/ran-hcloud.tf b/tf/ran-hcloud.tf
index eb1179dd..0071c703 100644
--- a/tf/ran-hcloud.tf
+++ b/tf/ran-hcloud.tf
@@ -80,6 +80,15 @@ resource "hcloud_firewall" "ran" {
             "::/0"
         ]
     }
+    rule {
+        direction = "in"
+        protocol = "tcp"
+        port = "6443"
+        source_ips = [
+            "0.0.0.0/0",
+            "::/0"
+        ]
+    }
     rule {
         direction = "in"
         protocol = "udp"