diff --git a/cluster/traefik.tf b/cluster/traefik.tf
index 54fcfc26..22c4a342 100644
--- a/cluster/traefik.tf
+++ b/cluster/traefik.tf
@@ -21,6 +21,8 @@ resource "helm_release" "traefik" {
                 traefik = {
                     traefik = {
                         hostPort = 9000
+                        hostIP = "100.105.14.66"
+                        expose = true
                     }
                     web = {
                         hostPort = 80
diff --git a/nixos/roles/k8s-cluster/kubernetes.nix b/nixos/roles/k8s-cluster/kubernetes.nix
index fdd2ad95..20471d38 100644
--- a/nixos/roles/k8s-cluster/kubernetes.nix
+++ b/nixos/roles/k8s-cluster/kubernetes.nix
@@ -11,7 +11,11 @@ in {
   ];
 
   networking = {
-    firewall.allowedTCPPorts = [kubeMasterAPIServerPort];
+    firewall.allowedTCPPorts = [
+      kubeMasterAPIServerPort
+      443
+      80
+    ];
     extraHosts = "${kubeMasterIP} ${kubeMasterHostname}";
   };