diff --git a/site/profile/manifests/jupyterhub.pp b/site/profile/manifests/jupyterhub.pp
index 9208af074..54be4dac1 100644
--- a/site/profile/manifests/jupyterhub.pp
+++ b/site/profile/manifests/jupyterhub.pp
@@ -16,6 +16,9 @@
   }
   include profile::slurm::submitter
 
+  nftables::rule { 'default_in-jupyterhub_tcp':
+    content => 'tcp dport 8081 accept comment "Accept jupyterhub"',
+  }
   consul::service { 'jupyterhub':
     port  => 8081,
     tags  => ['jupyterhub'],